病毒.rar

显示全部楼层 · 发表于 2007-9-6 11:45:43

病毒.rarRDSE.exe
MD5值(32位):0B3E38A62D460A923B19377403DEABFB
jkozd.exe
MD5值(32位):BBE35D416E15DF6EB9EE3D63CC8E6D0B

显示全部楼层 · 发表于 2007-9-6 11:46:22

detected: virus Packed.Win32.Np URL: http://bbs.kafan.cn/attachment.php?aid=124078//RDSE.exe
detected: malware not-virus:BadJoke.Win32.Jkozd URL: http://bbs.kafan.cn/attachment.php?aid=124078//jkozd.exe

显示全部楼层 · 发表于 2007-9-6 11:47:20

JOKE

显示全部楼层 · 发表于 2007-9-6 11:47:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\病毒.rar'
C:\Documents and Settings\Administrator\My Documents\
  病毒.rar
[0] Archive type: RAR
--> RDSE.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Vb.Yw.4.A.8
      [WARNING] Infected files in archives cannot be repaired!
--> jkozd.exe
      [DETECTION] Contains detection pattern of the joke program JOKE/Jkozd.A
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-6 12:12:43

解压报。。。。。。。。。。。
木马名称:Trojan-Spy.Win32.Delf.sk

程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\病毒\RDSE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Joke.Win32.Jkozd

程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\病毒\JKOZD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-6 12:14:17

费尔报RDSE.exe

显示全部楼层 · 发表于 2007-9-6 12:14:38

NOD32

显示全部楼层 · 发表于 2007-9-6 18:21:05

F:\病毒.rar >>RAR >>RDSE.exe - 可能是 Win32/Obfuscated 木马的一个变种
F:\病毒.rar >>RAR >>jkozd.exe - Win32/Jkozd 玩笑程序

显示全部楼层 · 发表于 2007-9-6 18:29:21

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3274
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\2

C:\Documents and Settings\uhthn\Desktop\2\RDSE.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\2\jkozd.exe - Suspicious file

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 病毒.rar

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源