0b7f99

显示全部楼层 · 发表于 2007-6-29 19:52:17

2007/6/29 19:47:22 eAmon file D:\病毒上报\99443[1].EXE a variant of Win32/PSW.Delf.NHI trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

显示全部楼层 · 发表于 2007-6-29 19:57:59

detected: virus Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\99443[1].rar/99443[1].exe

显示全部楼层 · 发表于 2007-6-29 20:42:38

Virus: Win32:Delf-EWR [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-29 20:45:03

Starting the file scan:

Begin scan in 'F:\病毒样本\99443[1].rar'
F:\病毒样本\99443[1].rar
  [0] Archive type: RAR
  --> 99443[1].exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-29 20:45:26

detected: virus Downloader (modification) URL: http://bbs.kafan.cn/attachment.php?aid=94599//99443[1].exe

显示全部楼层 · 发表于 2007-6-29 21:00:27

费尔无反应。

显示全部楼层 · 发表于 2007-6-29 21:01:44

avast灭之,报Win32:Delf-EWR [Trj]

显示全部楼层 · 发表于 2007-6-29 21:46:54

Scan performed at: 2007-6-29 21:46:37
Scanning Log
NOD32 version 2364 (20070629) NT
Command line: C:\Documents and Settings\EQ2\桌面\99443[1].rar
Operating memory - is OK

Date: 29.6.2007 Time: 21:46:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\99443[1].rar
C:\Documents and Settings\EQ2\桌面\99443[1].rar ?RAR ?99443[1].exe - a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:46:41 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-6-29 21:54:24

病毒: Win32:Delf-EWR [Trj]
檔案: 99443[1].exe
目錄: E:\病毒库\99443[1]
處理序: WinRAR.exe

[病毒样本] 0b7f99

本帖子中包含更多资源