[MD5: 49E39D]

显示全部楼层 · 发表于 2007-9-3 16:01:14

dfgfdgfdg

[ 本帖最后由 tonger2003 于 2007-9-3 16:06 编辑 ]

显示全部楼层 · 发表于 2007-9-3 16:06:07

Kaspersky Internet Security 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=122824 is infected with Heur.Downloader virus

[ 本帖最后由 1688388728 于 2007-9-3 16:33 编辑 ]

显示全部楼层 · 发表于 2007-9-3 16:08:10

Starting the file scan:

Begin scan in 'F:\病毒样本\Tonger2003.zip'
F:\病毒样本\Tonger2003.zip
  [0] Archive type: ZIP
  --> mm.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 16:08:36

Begin scan in 'C:\Documents and Settings\dell\桌面\Tonger2003.zip'
C:\Documents and Settings\dell\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> mm.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 16:09:13

微点砍掉

显示全部楼层 · 发表于 2007-9-3 16:09:50

detected: virus Heur.Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Tonger2003.zip/mm.exe

显示全部楼层 · 发表于 2007-9-3 16:32:41

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2680
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\mm.exe

C:\Documents and Settings\uhthn\Desktop\mm.exe - Infected with Win32.PDB-1843 Malware program (Paranoia Database) - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-3 16:46:33

扫描开始时间: 2007-9-3 16:45:42
扫描日志
NOD32 版本 2498 (20070902) NT
命令行: F:\virus\Tonger2003.zip

日期: 2007年9月3日时间: 16:45:43
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\Tonger2003.zip
F:\virus\Tonger2003.zip ?ZIP ?mm.exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马变种>
已扫描文件数量: 1
已发现病毒数量: 1
完成时间: 16:45:44 总共扫描时间: 1 秒 (00:00:01)

显示全部楼层 · 发表于 2007-9-3 17:17:49

2007-9-3 17:17:21 Deleted WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\mm.exe PWS-QQGame (Trojan)

显示全部楼层 · 发表于 2007-9-3 17:18:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\Tonger2003.zip'
C:\Documents and Settings\tim\桌面\Tonger2003.zip
  [0] Archive type: ZIP
  --> mm.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    A backup was created as '4749d1af.qua'  ( QUARANTINE )
   [INFO]    The file was deleted

[病毒样本] [MD5: 49E39D]

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块