(广告程序)蜘蛛\金山\瑞星等飘(MD5 : fc46c11f9e9cc43cd58ee60edf06db59 )

显示全部楼层 · 发表于 2007-9-12 17:14:00

应该也是广告程序

显示全部楼层 · 发表于 2007-9-12 17:14:28

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=126821 is infected with Trojan-Downloader.Win32.QQHelper.aec virus

显示全部楼层 · 发表于 2007-9-12 17:15:10

Scan performed at: 2007-9-12 17:14:53
Scanning Log
NOD32 version 2524 (20070912) NT
Command line: C:\Documents and Settings\Don johnson\桌面\netdde32.rar
Operating memory - is OK

Date: 12.9.2007 Time: 17:14:57
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\netdde32.rar
C:\Documents and Settings\Don johnson\桌面\netdde32.rar ?RAR ?netdde32.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:14:57 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-12 17:15:50

The requested URL http://bbs.kafan.cn/attachment.php?aid=126821 is infected with Trojan-Downloader.Win32.QQHelper.aec virus

显示全部楼层 · 发表于 2007-9-12 17:36:54

----------
[凝逸反毒] (http://hi.baidu.com/503165656)

[凝逸.扫描病毒引擎-日志] 2007.9.12 17:20:34

文件:F:\070913\netdde32\netdde32.exe | 感染:virus [659>20070910_ny0015.axx]3(1.1)
操作:删除文件

扫描完成|病毒:1 文件:1|耗时:250
----------

显示全部楼层 · 发表于 2007-9-12 17:54:53

木马名称:Trojan-Downloader.Win32.QQHelper.ftt

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.ECC8917B72F64E7\桌面\NETDDE32\NETDDE32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-12 18:05:41

小A报木马

显示全部楼层 · 发表于 2007-9-12 18:36:48

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4478
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\netdde32.exe

C:\Documents and Settings\uhthn\Desktop\netdde32.exe - Suspicious file

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-12 18:49:42

Begin scan in 'C:\Documents and Settings\dell\桌面\netdde32.rar'
C:\Documents and Settings\dell\桌面\netdde32.rar
  [0] Archive type: RAR
  --> netdde32.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-12 18:50:46

Sign of "Win32:Qqhelper-BW [Trj]" has been found in "F:\病毒样本\netdde32.rar\netdde32.exe\[UPX]" file.

[病毒样本] (广告程序)蜘蛛\金山\瑞星等飘(MD5 : fc46c11f9e9cc43cd58ee60edf06db59 )

本帖子中包含更多资源

本帖子中包含更多资源