VIP和一鸽子[MD5: 7BE9AA 8779F8]

显示全部楼层 · 发表于 2007-9-5 15:21:43

扫描开始时间: 2007-9-5 15:19:50
扫描日志
NOD32 版本 2505 (20070904) NT
命令行: F:\virus\桌面.rar

日期: 2007年9月5日时间: 15:19:51
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\桌面.rar
F:\virus\桌面.rar ?RAR ?vip.exe<病毒 - Win32/AutoRun.K 蠕虫变种>
已扫描文件数量: 2
已发现病毒数量: 1
完成时间: 15:20:21 总共扫描时间: 30 秒 (00:00:30)

svkp....

显示全部楼层 · 发表于 2007-9-5 16:47:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\桌面.rar'
C:\Documents and Settings\tim\桌面\桌面.rar
  [0] Archive type: RAR
  --> vip.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> siyua.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [INFO]    A backup was created as '470d0457.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 22:04:26

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3162
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\vip.exe - Suspicious of Win32.Trojan-PSW.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\siyua.exe - Suspicious file

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] VIP和一鸽子[MD5: 7BE9AA 8779F8]