[MD5: AEEDE2 7F5E44] 欢乐颂

显示全部楼层 · 发表于 2007-8-17 11:23:54

来午餐了

显示全部楼层 · 发表于 2007-8-17 11:25:55

view.jpg 的内容：

http://192.168.5.3/wwwroot/

显示全部楼层 · 发表于 2007-8-17 11:27:49

Start of the scan: 2007年8月17日  11:27

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\2.zip
  [0] Archive type: ZIP
  --> 2/1.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.bnj.14
   [INFO]    The file was deleted!

End of the scan: 2007年8月17日  11:27
Used time: 00:15 min

The scan has been done completely.

   1 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-17 11:27:53

detected: Trojan program Trojan-Downloader.Win32.Delf.bnj File: C:\Documents and Settings\Owner\×ÀÃæ\2.zip/2/1.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bnj File: C:\Documents and Settings\Owner\×ÀÃæ\2.zip/2/1.exe//NSPack

显示全部楼层 · 发表于 2007-8-17 11:28:28

微点
木马名称:Trojan-Downloader.Win32.Delf.gya

程序:
E:\2\2\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-8-17 11:31:27

显示全部楼层 · 发表于 2007-8-17 11:50:37

鸽子驱逐舰~~~~~~~~~~~····

显示全部楼层 · 发表于 2007-8-17 11:57:30

我的微点报未知；
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.297\2\1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\1.DLL
是否删除木马程序及其衍生物?

费尔扫描不报

显示全部楼层 · 发表于 2007-8-17 12:03:29

显示全部楼层 · 发表于 2007-8-17 12:05:57

vba32

[病毒样本] [MD5: AEEDE2 7F5E44] 欢乐颂

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源