毒网【转绅博】 样本送上[MD5: 49A15C 871D94]

allenhippo

运行后硬盘狂转，病毒对我全盘扫描 这么热的天会不会坏掉啊

[ 本帖最后由 allenhippo 于 2007-6-26 20:16 编辑 ]

1688388728

E:\病毒库\virus\~tmp1665.exe - infected with Trojan.PWS.Lineage

wangjay1980

deleted: Trojan program Trojan-PSW.Win32.Nilage.bcw        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/~tmp1665.exe//PE_Patch//ASPack//PE_Patch.MaskPE

caocao

KIS 7
已经删除: 木马程序 Trojan-PSW.Win32.Nilage.bcw        文件: D:\Downloads\virus.rar/~tmp1665.exe//PE_Patch//ASPack//PE_Patch.MaskPE

l784588

avast拦截了,报Win32:Lineage-590 [Trj].

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\~tmp1665.exe infected with Trojan.PWS.Lineage
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\ie.exe probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 4
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 84 Kb/s
Scan time: 00:00:01

小邪邪

扫：



执行：



已由访问保护规则禁止 E:\Downloads\test\virus\~tmp1665.exe
C:\Program Files\Common Files\Microsoft Shared\MSINFO\A1D29050.dll
通用最大保护:禁止在 Program Files 文件夹中创建新的可执行文件
已阻止的操作: 创建

tracydk

hj5abc

worms

Scanned disks, folders and files: F:\virus.rar
F:\virus.rar ?RAR ?~tmp1665.exe - a variant of Win32/Delf.CC worm
F:\virus.rar ?RAR ?ie.exe - a variant of Win32/Delf.NDF worm
Time of completion: 20:29:58 Total scanning time: 8 sec (00:00:08)

woai_jolin

2007/6/26 20:57:42        Scanning Log
2007/6/26 20:57:42        Version of virus signature database: 2355 (20070626)
2007/6/26 20:57:42        Date: 26.6.2007  Time: 20:57:42
2007/6/26 20:57:42        Scanned disks, folders and files: D:\virus\
2007/6/26 20:57:48        D:\virus\virus.rar - multiple threats - deleted - quarantined
2007/6/26 20:57:48        D:\virus\virus.rar » RAR » ~tmp1665.exe - a variant of Win32/Delf.CC worm
2007/6/26 20:57:48        D:\virus\virus.rar » RAR » ie.exe - a variant of Win32/Delf.NDF worm
2007/6/26 20:57:49        Number of scanned files: 3
2007/6/26 20:57:49        Number of threats found: 2
2007/6/26 20:57:49        Time of completion: 20:57:49  Total scanning time: 7 sec (00:00:07)