卡巴主动防御有反映..

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-9
Start time: 2007-5-11 0:06
Engine(s): KAV engine (AVK 17.5133), BD-Engine (BD 17.4713)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: rising259.exe
        Path: C:\Documents and Settings\Administrator\桌面\TEST\TEST
        Status: Move file into quarantine
        Virus: Generic.Malware.WBdld.E873CE47 (BD-Engine)
Object: rising560.exe
        Path: C:\Documents and Settings\Administrator\桌面\TEST\TEST
        Status: Move file into quarantine
        Virus: Generic.Malware.WBdld.E873CE47 (BD-Engine)
Analysis complete: 2007-5-11 0:06
    5 files checked
    2 infected files detected
    0 suspected files detected

Nblock

围墙

[ 本帖最后由 Nblock 于 2007-5-11 00:24 编辑 ]

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\TEST.rar'
D:\Documents and Settings\dell\桌面\TEST.rar
  [0] Archive type: RAR
  --> TEST\2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> TEST\4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> TEST\rising259.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> TEST\rising560.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\桌面.rar'
D:\Documents and Settings\dell\桌面\桌面.rar
  [0] Archive type: RAR
  --> 8[1].EXE
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.4 Backdoor server programs
  --> RAVWM.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> SYSTEM22.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> 1.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.LC.198
  --> 1[1].EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.LC.198
  --> RISING560.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> UPXDND.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 10.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 5.EXE
      [DETECTION] Is the Trojan horse TR/Agent.12288.36
  --> 5[1].EXE
      [DETECTION] Is the Trojan horse TR/Agent.12288.36
      [INFO]      The file was deleted!


End of the scan: 2007年5月11日  00:19
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     11 Files were scanned
     10 viruses and/or unwanted programs were found
      2 classified as suspicious:

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\桌面2.rar'
D:\Documents and Settings\dell\桌面\桌面2.rar
  [0] Archive type: RAR
  --> 2.EXE
      [DETECTION] Is the Trojan horse TR/PSW.13312.4
  --> NWIZTLBU.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 2[1].EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2336
  --> 4[1].EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.17
  --> RISING259.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 6.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 7[1].EXE
      [DETECTION] Is the Trojan horse TR/Agent.7680.64
  --> 7[2].EXE
      [DETECTION] Is the Trojan horse TR/Agent.7680.64
  --> 8.EXE
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.4 Backdoor server programs
      [INFO]      The file was deleted!


End of the scan: 2007年5月11日  00:20
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/2.EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rc        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/NWIZTLBU.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/2[1].EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qy        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/4[1].EXE//UPack
detected: virus Worm.Win32.Delf.bs        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/RISING259.EXE//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.nt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/6.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.qp        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/7[1].EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.qp        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/7[2].EXE//PE_Patch//UPack
detected: Trojan program Trojan-Spy.Win32.Agent.pr        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ2.rar/8.EXE//UPack
detected: Trojan program Trojan-Spy.Win32.Agent.pr        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8[1].EXE//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.nt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/RAVWM.EXE//PE_Patch//UPack
detected: virus Worm.Win32.Viking.lj        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/SYSTEM22.EXE//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lc        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/1.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lc        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/1[1].EXE//PE_Patch//UPack
detected: virus Worm.Win32.Delf.bs        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/RISING560.EXE//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kw        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/UPXDND.EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rc        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/10.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bjt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/5.EXE
detected: Trojan program Trojan-PSW.Win32.Nilage.bjt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/5[1].EXE

rwangpengf

讯雷安全组件报2个!

剑指七星

卡6 已经可以查杀了

已检测到: 病毒 Worm.Win32.Delf.bs        URL: http:/bbs.kafan.cn/attachment.php?aid=67718/TEST/rising259.exe/UPack

gezizi

原帖由 sol_valkyrie 于 2007-5-10 23:46 发表
卡巴7好牛啊,卡巴6扫不出

621的卡6杀猪了

hj5abc

NOD32漏了6个..

NOD32 版本 2258 (20070511) NT
命令行: F:\桌面
系统内存<病毒 - >
日期: 2007年5月11日  时间: 20:45:21
反 Rookits 技术已启用。

已扫描磁盘、文件夹和文件: F:\桌面\
F:\桌面\1.EXE<病毒 - 可能是 Win32/PSW.Agent.NCC 木马 变种>
F:\桌面\1[1].EXE<病毒 - 可能是 Win32/PSW.Agent.NCC 木马 变种>
F:\桌面\2.EXE<病毒 - Win32/PSW.Agent.NCC 木马> - 已隔离 - 无法清除。 - 已删除
F:\桌面\2[1].EXE<病毒 - Win32/PSW.Agent.NCC 木马> - 已隔离 - 无法清除。 - 已删除
F:\桌面\4[1].EXE<病毒 - Win32/PSW.Agent.NCC 木马 变种>
F:\桌面\5.EXE<病毒 - Win32/PSW.Agent.NCC 木马 变种>
F:\桌面\5[1].EXE<病毒 - Win32/PSW.Agent.NCC 木马 变种>
F:\桌面\6.EXE<病毒 - 可能是 Win32/PSW.Delf.NGU 木马 变种>
F:\桌面\RAVWM.EXE<病毒 - 可能是 Win32/PSW.Delf.NGU 木马 变种>
F:\桌面\RISING259.EXE<病毒 - Win32/TrojanDownloader.Delf.BHO 木马 变种>
F:\桌面\RISING560.EXE<病毒 - Win32/TrojanDownloader.Delf.BHO 木马 变种>
F:\桌面\SYSTEM22.EXE<病毒 - 可能是 Win32/Viking 病毒 变种>
F:\桌面\UPXDND.EXE<病毒 - Win32/PSW.Agent.NDF 木马 变种>
已扫描文件数量: 19
已发现病毒数量: 13