微点报新浪的木马

显示全部楼层 · 发表于 2007-7-7 13:47:57

今天在新浪网上看新闻，微点报木马。大家看看。

显示全部楼层 · 发表于 2007-7-7 13:50:13

报得没错

The requested URL http://bbs.kafan.cn/attachment.php?aid=97816 is infected with Trojan-Spy.Win32.Delf.vr virus

显示全部楼层 · 发表于 2007-7-7 13:50:14

卡6报

显示全部楼层 · 发表于 2007-7-7 13:52:58

micropoint

显示全部楼层 · 发表于 2007-7-7 13:54:04

AVAST也报,而且不让下载.

显示全部楼层 · 发表于 2007-7-7 14:03:07

mcafee报qqpass

显示全部楼层 · 发表于 2007-7-7 14:09:40

Scan performed at: 2007-7-7 14:09:34
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\EQ2\桌面\新建文件夹_(2).rar
Operating memory - is OK

Date: 7.7.2007 Time: 14:09:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\新建文件夹_(2).rar
C:\Documents and Settings\EQ2\桌面\新建文件夹_(2).rar ?RAR ?新建文件夹 (2)\HELP[1].EXE - a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:09:41 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-7-7 14:16:32

病毒: Trojan-Spy.Win32.Delf.vr
文件: 新建文件夹 (2)[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ODE3GLQZ
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-7 14:18:18

建议楼主看看新版规。

感觉现在越来越淡忘了。。。

[Scan path] C:\Documents and Settings\Administrator\桌面\(2).rar
>>>C:\Documents and Settings\Administrator\桌面\(2).rar\新建文件夹 (2)\HELP[1].EXE infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\(2).rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 22 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-7-7 14:58:55

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹 (2).rar'
C:\Documents and Settings\Administrator\桌面\
  新建文件夹 (2).rar
[0] Archive type: RAR
--> ÐÂ½¨ÎÄ¼þ¼Ð (2)\HELP[1].EXE
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27415
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as 'ac1698a4.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

微点报新浪的木马

本帖子中包含更多资源

本帖子中包含更多资源

回复 #1 niuniu7879 的帖子