[MD5: E060C1]

显示全部楼层 · 发表于 2007-7-9 13:47:12

费尔木马一个。

显示全部楼层 · 发表于 2007-7-9 13:50:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.CNC.95
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-9 13:56:04

c:\ABC\样本.rar:\svchost.exe - Signature 'Trojan-Downloader.Win32.Delf.atr' found
c:\ABC\样本.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.000

显示全部楼层 · 发表于 2007-7-9 13:58:36

显示全部楼层 · 发表于 2007-7-9 14:14:51

微点砍掉

显示全部楼层 · 发表于 2007-7-9 14:24:25

2007-7-9 14:24:09 Scanning Log
2007-7-9 14:24:09 Version of virus signature database: 2353 (20070625)
2007-7-9 14:24:09 Date: 9.7.2007 Time: 14:24:08
2007-7-9 14:24:09 Scanned disks, folders and files: D:\firefox下载的文件\样本.rar
2007-7-9 14:24:17 D:\firefox下载的文件\样本.rar - a variant of Win32/TrojanDownloader.Delf.NJH trojan - deleted - quarantined
2007-7-9 14:24:17 D:\firefox下载的文件\样本.rar » RAR » svchost.exe - a variant of Win32/TrojanDownloader.Delf.NJH trojan
2007-7-9 14:24:17 Number of scanned files: 2
2007-7-9 14:24:17 Number of threats found: 1
2007-7-9 14:24:17 Time of completion: 14:24:17 Total scanning time: 9 sec (00:00:09)

显示全部楼层 · 发表于 2007-7-9 16:37:07

Hello.
New malicious software was found in the attached file. Trojan-Downloader.Win32.Small.cnc
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2007-7-9 17:06:04

扫描进行于：2007/7/9 16:54:28
扫描日志
NOD32版本 2384 (20070708) NT
命令行： D:\virus\样本.rar
C:\Program Files\Eset\nod32.exe - 是正常的
1 的MBR区.物理磁盘 - 是正常的
1 的启动引导区.物理磁盘 - 是正常的

日期： 9.7.2007 时间：16:54:29
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\virus\样本.rar
D:\virus\样本.rar >>RAR >>svchost.exe - Win32/TrojanDownloader.Delf.NJH 木马的变种
D:\virus\样本.rar:Zone.Identifier - 是正常的
已扫描的文件数目：2
已发现的病毒数目：1
完成时间： 16:54:29 总扫描时间：0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-7-9 17:08:43

---------------------------------------------------------
AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间: 17:09:28 2007-7-9

+ 扫描结果:

F:\样本.rar/svchost.exe -> Downloader.Small.cnc : 未进行操作.

::报告结束

[病毒样本] [MD5: E060C1]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源