下班喽，来几个[MD5: 8709FC 784F80 56A7A8 2530B2]

显示全部楼层 · 发表于 2007-6-27 21:18:24

Virus: Win32:Delf-BCN [Wrm] (2x), Win32:Onlinegames-ABF [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Win32:Agent-GWA [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-27 23:58:57

AVAST删除4个

显示全部楼层 · 发表于 2007-6-28 00:14:30

“易”字图表运行后，没有后续动作。进程生成后，又自动退出

[ 本帖最后由 scottxzt 于 2007-6-28 00:19 编辑 ]

显示全部楼层 · 发表于 2007-6-28 00:59:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus'
C:\Documents and Settings\Administrator\My Documents\virus\
  svchoost.exe
[0] Archive type: ZIP SFX (self extracting)
--> avp.bat
--> winmine.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> delay.vbs
      [INFO]    The file was deleted!
  zx1[1].exe
[0] Archive type: ZIP SFX (self extracting)
--> delay.vbs
--> winmine.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> avp.bat
      [INFO]    The file was deleted!
  zx2[1].exe
  zxgezi.exe
[0] Archive type: ZIP SFX (self extracting)
--> avp.bat
--> delay.vbs
--> winmine.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.603648 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 下班喽，来几个[MD5: 8709FC 784F80 56A7A8 2530B2]

本帖子中包含更多资源