65F8A4

显示全部楼层 · 发表于 2007-6-28 00:27:21

Is the Trojan horse TR/Delphi.Downloader.Gen

显示全部楼层 · 发表于 2007-6-28 00:39:09

病毒: Win32:Delf-EWH [Trj]
檔案: 样本[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PVD325CG
處理序: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-28 00:41:06

显示全部楼层 · 发表于 2007-6-28 00:41:14

micropoint

显示全部楼层 · 发表于 2007-6-28 00:43:39

Start of the scan: 2007年6月28日  00:49

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> xuik.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-28 06:14:57

Scan performed at: 2007-6-28 6:14:42
Scanning Log
NOD32 version 2359 (20070627) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 28.6.2007 Time: 06:14:47
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?xuik.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 06:14:48 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-6-28 06:29:09

Virus: Trojan-Downloader.Win32.Delf.bcm

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-28 06:55:29

deleted: Trojan program Trojan-Downloader.Win32.Delf.bcm File: C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar/xuik.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-6-28 06:59:07

已检测到: 木马程序 Trojan-Downloader.Win32.Delf.bcm URL: http:/bbs.kafan.cn/attachment.php?aid=93981/xuik.exe/PE_Patch/UPack

[病毒样本] 65F8A4

本帖子中包含更多资源

微点

本帖子中包含更多资源

本帖子中包含更多资源