[A87EF6]

显示全部楼层 · 发表于 2007-9-14 21:26:57

微点：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LOAD59.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:3764
远端地址:81.95.146.252(英国)
远端端口:80
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LOAD59.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-14 21:32:14

继续飘过

显示全部楼层 · 发表于 2007-9-14 21:32:53

nod32陪你飘

显示全部楼层 · 发表于 2007-9-14 21:46:01

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=127656 is infected with Backdoor.Win32.Delf.bto virus

显示全部楼层 · 发表于 2007-9-14 22:00:36

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4909
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\load59.exe

C:\Documents and Settings\uhthn\Desktop\load59.exe - OK

1 Files scanned
0 Infected files found
0 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-14 22:10:57

对象: load59.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\load59.zip
Status: 已发现病毒
病毒: Win32.Virtob.X (BD 引擎)

显示全部楼层 · 发表于 2007-9-14 22:53:51

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\load59.zip'
C:\Documents and Settings\Administrator\My Documents\
  load59.zip
[0] Archive type: ZIP
--> load59.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.13312
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-15 10:19:02

瑞星飘过

运行后防火墙题是由程序访问网络

[病毒样本] [A87EF6]

本帖子中包含更多资源