5FBDC8

显示全部楼层 · 发表于 2007-6-30 01:13:50

上报了。。。

显示全部楼层 · 发表于 2007-6-30 01:16:51

尝试打开一个被受传染的文件。

文件: 样本.rar
目录: E:\病毒库
病毒: Win32:Delf-EWH [Trj]

[ 本帖最后由 1688388728 于 2007-6-30 01:46 编辑 ]

显示全部楼层 · 发表于 2007-6-30 01:39:59

显示全部楼层 · 发表于 2007-6-30 02:27:50

Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-6-30 2:27:09,Heuri.ERNM,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\样本.rar>>xuik.exe,Manual scan

显示全部楼层 · 发表于 2007-6-30 06:02:23

Virus: Win32:Delf-EWH [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-30 08:50:21

费尔启发。

显示全部楼层 · 发表于 2007-6-30 08:52:28

2007/6/30 8:46:58 eAmon file D:\病毒上报\XUIK.EXE probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

显示全部楼层 · 发表于 2007-6-30 10:17:19

Hello,

xuik.exe_ - Trojan-Downloader.Win32.Delf.bcm

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: ??xuli.zip

显示全部楼层 · 发表于 2007-6-30 12:02:37

xuik.exe - 可能是 Win32/Genetik 木马的一个变种

[病毒样本] 5FBDC8

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块