[MD5: B76BE0]

显示全部楼层 · 发表于 2007-7-5 01:00:24

刚刚抓到的

显示全部楼层 · 发表于 2007-7-5 01:07:22

更新完毕！可以睡觉喽。。
嘀嘀……
  　　╭══╮
  　╭╯走喽║.oｏ
  　╰⊙═⊙╯。○快追呀！！！

[Scan path] C:\Documents and Settings\Administrator\桌面\b[1].rar
>>C:\Documents and Settings\Administrator\桌面\b[1].rar\b[1].exe probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\b[1].rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 23 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-7-5 03:04:46

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=96670 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-5 03:18:28

我运行了直接重启.什么东西.病毒: Trojan-Downloader.Win32.Delf.bnc
文件: b[1][1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4LEVWHMJ
进程: GreenBrowser.exe

[ 本帖最后由 1688388728 于 2007-7-5 20:11 编辑 ]

显示全部楼层 · 发表于 2007-7-5 05:05:07

Found a virus or unwanted program 'HEUR/Malware' [heuristic]
in file 'F:\b[1].rar'.
Action taken:

显示全部楼层 · 发表于 2007-7-5 08:48:05

AVAST飘过

显示全部楼层 · 发表于 2007-7-5 09:11:34

D:\firefox下载的文件\b[1].rar ?RAR ?b[1].exe - 可能是 Win32/Genetik 木马变种
nod嘻嘻！

显示全部楼层 · 发表于 2007-7-5 09:22:25

C:\ABC\b[1].rar:\b[1].exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
C:\ABC\b[1].rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.015

显示全部楼层 · 发表于 2007-7-5 09:53:19

微点砍掉

显示全部楼层 · 发表于 2007-7-5 11:03:43

b[1].exe_ - Trojan-Downloader.Win32.Delf.bnc,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Erakhtin Kirill
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

[病毒样本] [MD5: B76BE0]

本帖子中包含更多资源

本帖子中包含更多资源