在朋友机子上抓的新货

gzg

扫扫看

woai_jolin

已删除：病毒 Heur.Downloader (修改)        文件　: F:\v\bb.rar/GHO.exe//NSPack//PE_Patch.MaskPE

平淡

费尔过了。。

红心王子

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\bb.rar'
C:\Documents and Settings\Administrator\桌面\bb.rar
  [0] Archive type: RAR
  --> AutoRun.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> GHO.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was moved to '47108c92.qua'!


End of the scan: 2007年9月8日  19:49
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

微点卫士

微点：
蠕虫名称:Worm.Win32.AutoRun.ce

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\GHO.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

qigang

C:\Documents and Settings\sx\桌面\virus.rar>>GHO.exe>>nspack>>pe_patch(14)

Worm.Win32.Autorun.ff

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.Autorun.ff   

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.52

promised

C:\ABC\bb.rar:\AutoRun.exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\bb.rar:\GHO.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现

hj5abc

F:\bb.rar » RAR » GHO.exe - a variant of Win32/AutoRun.K worm
F:\bb.rar » RAR » AutoRun.exe - probably a variant of Win32/AutoRun.Q worm

Nblock

原帖由 微点卫士 于 2007-9-8 19:52 发表
微点：
蠕虫名称:Worm.Win32.AutoRun.ce

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\GHO.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

[ 本帖最后由 Nblock 于 2007-9-8 20:17 编辑 ]

taihuxian

DR/Delphi.Gen