转一个MD5: C1CEAD

显示全部楼层 · 发表于 2007-7-11 00:03:06

NF.rar:\MSCONF.EXE - Signature 'Trojan.Win32.Delf.vb' found
c:\ABC\MSCONF.rar
2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:01.297

显示全部楼层 · 发表于 2007-7-11 00:04:52

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\MSCONF.rar/MSCONF.EXE//PE_Patch.UPX

显示全部楼层 · 发表于 2007-7-11 00:06:55

Begin scan in 'D:\Documents and Settings\dell\桌面\MSCONF.rar'
D:\Documents and Settings\dell\桌面\MSCONF.rar
  [0] Archive type: RAR
  --> MSCONF.EXE
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-11 00:08:23

"The application ""MSCONF.EXE"" is trying
to change the registration database.

Would you like to accept the changes?

Entry: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Key: Msconfig

Information:
This entry contains a new application which will run when the system is boote

程序:
E:\病毒库\MSCONF\MSCONF.EXE
木马程序生成以下文件:
1) C:\MSCONF.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-11 00:08:51

nod32 pass.

显示全部楼层 · 发表于 2007-7-11 00:14:44

咖啡挂了

显示全部楼层 · 发表于 2007-7-11 00:47:31

AVAST MISS

显示全部楼层 · 发表于 2007-7-11 07:34:41

Starting the file scan:

Begin scan in 'F:\病毒样本\MSCONF.rar'
F:\病毒样本\MSCONF.rar
  [0] Archive type: RAR
  --> MSCONF.EXE
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-11 07:38:16

AVG又启发了...

显示全部楼层 · 发表于 2007-7-11 08:34:22

已检测到: 木马程序 Backdoor.Win32.Agent.apy URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX

[病毒样本] 转一个MD5: C1CEAD

本帖子中包含更多资源

本帖子中包含更多资源