[MD5: 79158C]

显示全部楼层 · 发表于 2007-7-4 11:15:14

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/death.exe

显示全部楼层 · 发表于 2007-7-4 11:18:34

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> death.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-4 11:20:04

微点砍掉

显示全部楼层 · 发表于 2007-7-4 11:27:11

原帖由 wangjay1980 于 2007-7-4 11:15 发表
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/death.exe

为什么我的卡巴么有heur？？？

显示全部楼层 · 发表于 2007-7-4 11:29:11

symantec

W32.SillyFDC

显示全部楼层 · 发表于 2007-7-4 11:51:19

Scanning Log
NOD32 version 2377 (20070704) NT
Command line: C:\Documents and Settings\Administrator\ ?
?桌面\??.rar
Checking CRC of NOD32.EXE: Status OK
Scanning memory: Not performed (option disabled)
Error occurred while scanning MBR sector of the 2.  ?
?physical disk. Error reading sector.
Error occurred while scanning MBR sector of the 3.  ?
?physical disk. Error reading sector.
Date: 4.7.2007  Time: 11:51:03
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\Administrator\桌面\??.rar
C:\Documents and Settings\Administrator\桌面\??.rar ?RAR  ?
??death.exe - a variant of Win32/Hensis worm
Number of scanned files: 1
Number of threats found: 1
Time of completion: 11:51:03 Total scanning time: 0 sec  ?
?(00:00:00)

显示全部楼层 · 发表于 2007-7-4 11:52:25

样本.rar\death.exe;D:\Documents and Settings\dell\桌面\样本.rar;Probably WIN.WORM.Virus;;

显示全部楼层 · 发表于 2007-7-4 12:08:59

C:\ABC\样本.rar:\death.exe - Signature 'Worm.Win32.Delf.bo' found
C:\ABC\样本.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2007-7-4 12:34:13

death.exe_ - Virus.Win32.AutoRun.y

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com

[病毒样本] [MD5: 79158C]

本帖子中包含更多资源

本帖子中包含更多资源

启发