444.exe【ad2524】

显示全部楼层 · 发表于 2007-9-1 20:04:59

Scan performed at: 2007-9-1 20:04:42
Scanning Log
NOD32 version 2495 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\444.zip
Operating memory - is OK

Date: 1.9.2007 Time: 20:04:46
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\444.zip
C:\Documents and Settings\Don johnson\桌面\444.zip ?ZIP ?444.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:04:46 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-1 20:07:10

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\444.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-1 20:08:15

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 1442
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\444.exe - Suspicious of MalwareSpy.Win32.Trojan-Downloader.Delf.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-1 20:08:27

NOD32报 Win32/Genetik trojan真是无敌了！！

显示全部楼层 · 发表于 2007-9-1 20:14:02

--> 444.exe
[DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen

显示全部楼层 · 发表于 2007-9-1 20:56:25

Start of the scan: 2007年9月1日  20:56

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\444.zip
  [0] Archive type: ZIP
  --> 444.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年9月1日  20:56
Used time: 00:07 min

The scan has been done completely.

显示全部楼层 · 发表于 2007-9-1 22:32:46

检测到一个应用程序尝试打开一个外部进程
目标 PID: 2252
映像名称: IEXPLORE.EXE

显示全部楼层 · 发表于 2007-9-1 22:38:32

RS07 pass

显示全部楼层 · 发表于 2007-9-1 22:42:05

看红伞报的就知道AVAST要飘

[病毒样本] 444.exe【ad2524】

本帖子中包含更多资源

D:\病毒库\444\444.exe