d095c2

显示全部楼层 · 发表于 2007-7-5 11:33:10

Starting the file scan:

Begin scan in 'F:\病毒样本\A.rar'
F:\病毒样本\A.rar
  [0] Archive type: RAR
  --> A.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-5 11:34:30

RS挂

显示全部楼层 · 发表于 2007-7-5 11:39:07

Scan performed at: 2007-7-5 11:38:53
Scanning Log
NOD32 version 2379 (20070704) NT
Command line: C:\Documents and Settings\EQ2\桌面\A.rar
Operating memory - is OK

Date: 5.7.2007 Time: 11:38:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\A.rar
C:\Documents and Settings\EQ2\桌面\A.rar ?RAR ?A.exe - a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 11:38:59 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-5 11:41:34

detected: virus Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\A.rar/A.exe

Hello,

A.exe_ - Trojan-Spy.Win32.Delf.vu

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: A.zip

[ 本帖最后由 wangjay1980 于 2007-7-5 13:33 编辑 ]

显示全部楼层 · 发表于 2007-7-5 11:41:41

病毒: Win32:Delf-EWR [Trj]
文件: A.exe
目录: E:\病毒库\A
进程: WinRAR.exe

显示全部楼层 · 发表于 2007-7-5 11:42:50

C:\ABC\A.rar:\A.exe - Signature 'Trojan.Delf.NEB' found
C:\ABC\A.rar
4 Files scanned
(2 Archives with 2 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.157

显示全部楼层 · 发表于 2007-7-5 12:27:59

nis down tr

显示全部楼层 · 发表于 2007-7-5 13:10:36

Avast 灭之,Win32:Delf-EWR [Trj]

显示全部楼层 · 发表于 2007-7-5 13:31:19

扫描进行于：2007/7/5 13:26:02
扫描日志
NOD32版本 2379 (20070704) NT
命令行： D:\virus\A.exe
C:\Program Files\Eset\nod32.exe - 是正常的
1 的MBR区.物理磁盘 - 是正常的
1 的启动引导区.物理磁盘 - 是正常的

日期： 5.7.2007 时间：13:26:03
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\virus\A.exe
D:\virus\A.exe - Win32/PSW.Delf.NHI 木马的变种
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 13:26:04 总扫描时间：1 秒 (00:00:01)

[病毒样本] d095c2

本帖子中包含更多资源