[MD5: 79158C]

显示全部楼层 · 发表于 2007-7-4 10:21:47

C:\ABC\样本.rar:\vip.exe - Signature 'Worm.Win32.Delf.bo' found
C:\ABC\样本.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2007-7-4 10:22:24

Scan performed at: 2007-7-4 10:22:10
Scanning Log
NOD32 version 2377 (20070704) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 4.7.2007 Time: 10:22:15
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?vip.exe - a variant of Win32/Hensis worm
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 10:22:15 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-4 10:23:44

微点砍掉

显示全部楼层 · 发表于 2007-7-4 10:34:52

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/vip.exe

显示全部楼层 · 发表于 2007-7-4 10:36:39

样本.rar
  [0] Archive type: RAR
  --> vip.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-4 10:48:38

费尔杀。

显示全部楼层 · 发表于 2007-7-4 11:13:47

虫子

显示全部楼层 · 发表于 2007-7-4 12:08:13

DR 继续启发报蠕虫

显示全部楼层 · 发表于 2007-7-4 12:34:43

vip.exe_ - Virus.Win32.AutoRun.y

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com

[病毒样本] [MD5: 79158C]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源