avast!报

kp2006

快杀

Redevil

The requested URL http://bbs.kafan.cn/attachment.php?aid=81825 is infected with Trojan-Downloader.Win32.Delf.bcm virus

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\h.rar'
D:\Documents and Settings\dell\桌面\
D:\Documents and Settings\dell\桌面\h.rar
  [0] Archive type: RAR
  --> perfne.exe
      [DETECTION] Contains signature of the worm WORM/Dasher.B.TScan
      [WARNING]   Infected files in archives cannot be repaired!
  --> user32.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING]   Infected files in archives cannot be repaired!
  --> WINLOGON.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.apl.1
      [WARNING]   Infected files in archives cannot be repaired!

jlennon

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-6-2, 1:15

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\h.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-6-4, 7:53:15
---------------------------------------------------------------------

[Found possible virus]         <W32/Blocker-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\h.rar->user32.dll
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\h.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\h.rar->WINLOGON.EXE

---------------------------------------------------------------------
Scan ended:        2007-6-4, 7:53:17
Duration:        0:00:02

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

wangjay1980

Hello,

Default.bk1, Default.bk2, Default.jcd, Default.jcd.bak, shell.fne

No malicious code were found in these files.

perfne.exe_ - Trojan-Downloader.Win32.VB.ayj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: h.zip

taihuxian

Virus: Win32:Small-EER [Trj] (4x), Win32:Trojan-gen. {Other}, Win32:Delf-ECV [Trj], Win32:Trojano-3372 [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

啊弥陀佛

微点干掉了

woai_jolin

2007/6/5 23:53:35        Scanning Log
2007/6/5 23:53:35        Version of virus signature database: 2309 (20070605)
2007/6/5 23:53:35        Date: 5.6.2007  Time: 23:53:35
2007/6/5 23:53:35        Scanned disks, folders and files: E:\病毒测试\
2007/6/5 23:53:37        E:\病毒测试\h.rar - multiple threats - deleted
2007/6/5 23:53:37        E:\病毒测试\h.rar &raquo; RAR &raquo; perfne.exe - probably unknown NewHeur_PE virus [7]
2007/6/5 23:53:37        E:\病毒测试\h.rar &raquo; RAR &raquo; user32.dll - Win32/TrojanDownloader.Delf.NVH trojan
2007/6/5 23:53:37        E:\病毒测试\h.rar &raquo; RAR &raquo; WINLOGON.EXE - Win32/PSW.Lineage.APL trojan
2007/6/5 23:53:37        Number of scanned files: 9
2007/6/5 23:53:37        Number of threats found: 3
2007/6/5 23:53:37        Time of completion: 23:53:37  Total scanning time: 2 sec (00:00:02)
2007/6/5 23:53:37        Notes:
2007/6/5 23:53:37        [7] File is probably infected with an unknown virus.

foxhound

A-Squared	Found nothing
AntiVir	Found WORM/Dasher.B.TScan, TR/Delphi.Downloader.Gen, TR/PSW.Nilage.apl.1
ArcaVir	Found Trojan.Agent.Jt.01
Avast	Found Win32:Small-EER
AVG Antivirus	Found Downloader.Generic4.TZO, PSW.Generic4.MNC
BitDefender	Found Win32.Worm.Soser.B
ClamAV	Found Trojan.Spy-5716
Dr.Web	Found Tool.TcpScan, Trojan.DownLoader.21989, Trojan.PWS.Lineage
F-Prot Antivirus	Found Possibly a new variant of W32/Blocker-based!Maximus
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.VB.ayj, Trojan-Downloader.Win32.Delf.bcm, Trojan-PSW.Win32.Nilage.apl
Fortinet	Found W32/VB.AYJ!tr.dldr
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.VB.ayj, Trojan-Downloader.Win32.Delf.bcm, Trojan-PSW.Win32.Nilage.apl
NOD32	Found probably unknown NewHeur_PE, Win32/TrojanDownloader.Delf.NVH, Win32/PSW.Lineage.APL (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found Trj/Lineage.ALO, Trj/Lineage.ASH
Rising Antivirus	Found nothing
VirusBuster	Found Packed/FSG
VBA32	Found Embedded.Trojan.DownLoader.4293, MalwareScope.Worm.Viking.4 (probable variant)

大家几乎都报了啊~~~~~~~