07d07f 143925 975e83 aa2498 201624

显示全部楼层 · 发表于 2007-9-10 10:36:49

扫描开始时间: 2007-9-10 10:38:13
日期: 2007年9月10日时间: 10:38:21
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: D:\firefox下载的文件\5.zip
D:\firefox下载的文件\5.zip ?ZIP ?5.exe<病毒 - Win32/AutoRun.K 蠕虫变种>
D:\firefox下载的文件\5.zip ?ZIP ?1.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马变种>
D:\firefox下载的文件\5.zip ?ZIP ?2.exe<病毒 - 可能是 Win32/Genetik 木马变种>
D:\firefox下载的文件\5.zip ?ZIP ?3.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
D:\firefox下载的文件\5.zip ?ZIP ?4.exe<病毒 - Win32/PSW.Delf.NIY 木马变种>
已扫描文件数量: 6
已发现病毒数量: 5
已清除病毒的文件数量: 1
完成时间: 10:38:25 总共扫描时间: 4 秒 (00:00:04)

显示全部楼层 · 发表于 2007-9-10 10:37:05

显示全部楼层 · 发表于 2007-9-10 10:48:22

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=125948 is infected with Heur.Downloader virus

显示全部楼层 · 发表于 2007-9-10 10:48:35

NOD32全报。

显示全部楼层 · 发表于 2007-9-10 11:04:03

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\5.zip'
C:\Documents and Settings\Administrator\My Documents\
  5.zip
[0] Archive type: ZIP
--> 5.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 1.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.12665
      [WARNING] Infected files in archives cannot be repaired!
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 4.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年9月9日  20:03
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   6 Files were scanned
   4 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   6 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-10 14:05:00

F:\9.10\5.zip >>ZIP >>5.exe - Win32/AutoRun.K 蠕虫的变种
F:\9.10\5.zip >>ZIP >>1.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马的一个变种
F:\9.10\5.zip >>ZIP >>2.exe - 可能是 Win32/Genetik 木马的一个变种
F:\9.10\5.zip >>ZIP >>3.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.10\5.zip >>ZIP >>4.exe - Win32/PSW.Delf.NIY 木马的变种

显示全部楼层 · 发表于 2007-9-10 17:25:31

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4108
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\5.exe - Suspicious of MalwareSpy.Win32.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1

5 Files scanned
0 Infected files found
5 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] 07d07f 143925 975e83 aa2498 201624

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源