[39af56]ani带出的~

显示全部楼层 · 发表于 2007-7-26 22:31:15

恩~

显示全部楼层 · 发表于 2007-7-26 22:32:07

D:\download\t3\help.rar:\help.exe - Signature 'Trojan.Delf.NEB' found
D:\download\t3\help.rar

2 Files scanned
(1 Archive with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.220

显示全部楼层 · 发表于 2007-7-26 22:38:22

显示全部楼层 · 发表于 2007-7-26 22:39:23

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105466 is infected with Downloader virus

显示全部楼层 · 发表于 2007-7-26 22:44:51

金山挂,费尔挂!!!

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.235\HELP.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM16.JUP
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM16.INS
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-26 22:47:10

应该是重复样本，名字和大小都一样，虽然md5不一样

显示全部楼层 · 发表于 2007-7-26 22:50:54

上报

显示全部楼层 · 发表于 2007-7-26 23:10:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\help.rar'
C:\Documents and Settings\Administrator\桌面\help.rar
  [0] Archive type: RAR
  --> help.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-26 23:17:48

F:\help.rar:<RAR>\help.exe : infected MalwareScope.Trojan-PSW.Game.7

显示全部楼层 · 发表于 2007-7-26 23:19:45

FSCS PASS

[病毒样本] [39af56]ani带出的~

本帖子中包含更多资源

本帖子中包含更多资源