[30e541] 下面不远处挖出的……

显示全部楼层 · 发表于 2007-7-28 10:47:34

又是vip 叫mvp不是更好……~

显示全部楼层 · 发表于 2007-7-28 10:48:42

NOD 32：

F:\virus\vip.rar »RAR »vip.exe - a variant of Win32/PSW.Delf.NIY trojan

显示全部楼层 · 发表于 2007-7-28 10:49:09

2007-7-28 10:48:46 Scanning Log
2007-7-28 10:48:46 Version of virus signature database: 2426 (20070727)
2007-7-28 10:48:46 Date: 28.7.2007 Time: 10:48:46
2007-7-28 10:48:46 Scanned disks, folders and files: E:\Ignore\
2007-7-28 10:48:46 E:\Ignore\vip.rar - a variant of Win32/PSW.Delf.NIY trojan - deleted - quarantined
2007-7-28 10:48:46 E:\Ignore\vip.rar » RAR » vip.exe - a variant of Win32/PSW.Delf.NIY trojan
2007-7-28 10:48:46 Number of scanned files: 2
2007-7-28 10:48:46 Number of threats found: 1
2007-7-28 10:48:46 Time of completion: 10:48:46 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-28 10:52:31

D:\download\t3\vip.rar:\vip.exe - Signature 'Trojan.Delf.NEB' found
D:\download\t3\vip.rar:\vip2.htm
D:\download\t3\vip.rar

3 Files scanned
(1 Archive with 2 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.330

显示全部楼层 · 发表于 2007-7-28 10:52:56

金山报1个,费尔报:Trojan.Agent.ikwgcp

微点:
木马名称:Trojan-Spy.Win32.Delf.cpo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-7-28 10:53:56

小红伞杀啦。

显示全部楼层 · 发表于 2007-7-28 10:55:49

The requested URL http://bbs.kafan.cn/attachment.php?aid=106029 is infected with Trojan-Spy.Win32.Delf.vw virus

显示全部楼层 · 发表于 2007-7-28 10:56:58

F:\vip.rar:<RAR>\vip.exe : infected MalwareScope.Trojan-PSW.Game.7

显示全部楼层 · 发表于 2007-7-28 10:58:43

说真的……ik的malware是假冒的……

显示全部楼层 · 发表于 2007-7-28 11:00:11

那是vba32好吧。。。。。无语ing

[病毒样本] [30e541] 下面不远处挖出的……

本帖子中包含更多资源

回复 #8 taitan001 的帖子