来个ANI大家尝尝鲜[MD5: A846B6 AF9DAD F3D3FD]

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\样本.rar'
C:\Documents and Settings\dell\桌面\样本.rar
  [0] Archive type: RAR
  --> windows[1].bmp
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> xjz2007[1].bmp
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-7-26 13:43:06
Scanning Log
NOD32 version 2421 (20070725) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 26.7.2007  Time: 13:43:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?windows[1].bmp - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?Autorun.inf - INF/Autorun virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?xjz2007[1].bmp - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 13:43:12 Total scanning time: 0 sec (00:00:00)

promised

C:\ABC\down.exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\xzz.exe - 特征码 'Virus.Win32.HLLP.Famer' 被发现

欠妳緈諨

AVAST报了 ANI，那2个EXE AVAST报另一个

欠妳緈諨

另一个下载不报扫描居然报了

woai_jolin

残缺的唯美

咖啡报了

rasis

xzz.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.NWJ

down.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen

啊弥陀佛

原帖由 moonsilver 于 2007-7-26 13:38 发表
这个ANI太老了，微点是不杀网马之类的

网马不是样本吗，微点不杀那微点杀什么?

微点砍掉

tracydk

真是少见