昨天抓到的[MD5: DF1D04]

显示全部楼层 · 发表于 2007-7-3 18:04:22

昨天抓到的一个木马下载器

[ 本帖最后由 newcenturysun 于 2007-7-3 18:07 编辑 ]

显示全部楼层 · 发表于 2007-7-3 18:05:07

扫描开始时间: 2007-7-3 18:06:37
扫描日志
NOD32 版本 2373 (20070703) NT
命令行: F:\virus\PegeFile.zip

日期: 2007年7月3日时间: 18:06:38
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\PegeFile.zip
F:\virus\PegeFile.zip ?ZIP ?PegeFile.pif<病毒 - 可能是 Win32/PSW.Delf.NHI 木马变种>
已扫描文件数量: 1
已发现病毒数量: 1
完成时间: 18:06:38 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-7-3 18:05:22

[Scan path] C:\Documents and Settings\Administrator\桌面\PegeFile.zip
>C:\Documents and Settings\Administrator\桌面\PegeFile.zip\PegeFile.pif infected with Trojan.PWS.Lineage
C:\Documents and Settings\Administrator\桌面\PegeFile.zip - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 22 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-7-3 18:08:00

C:\ABC\PegeFile.zip:\PegeFile.pif - Signature 'Trojan-PWS.Win32.Delf.mc' found
C:\ABC\PegeFile.zip

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2007-7-3 18:08:14

PegeFile.zip
  [0] Archive type: ZIP
  --> PegeFile.pif
   [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.1

显示全部楼层 · 发表于 2007-7-3 18:40:39

The requested URL http://bbs.kafan.cn/attachment.php?aid=96126 is infected with Trojan-PSW.Win32.Delf.wh virus

显示全部楼层 · 发表于 2007-7-3 18:57:23

Scan performed at: 2007-7-3 18:55:32
Scanning Log
NOD32 version 2373 (20070703) NT
Command line: F:\PegeFile.zip
Operating memory - is OK

Date: 3.7.2007 Time: 18:55:36
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\PegeFile.zip
F:\PegeFile.zip ?ZIP ?PegeFile.pif - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 18:55:36 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-3 19:09:42

卡巴斯基反病毒6.0个人版
The requested URL http://bbs.kafan.cn/attachment.php?aid=96126 is infected with Trojan-PSW.Win32.Delf.wh virus

显示全部楼层 · 发表于 2007-7-3 19:12:53

病毒: Trojan-PSW.Win32.Delf.wh
文件: PegeFile[1].zip
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\KDYR0HU7
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-3 19:50:44

Avast灭之,报Win32:Nilage-AI [Trj]

[病毒样本] 昨天抓到的[MD5: DF1D04]

本帖子中包含更多资源

浏览过的版块