找到一个

显示全部楼层 · 发表于 2007-9-18 11:55:24

文件: C:\Documents and Settings\moonsilver\桌面\1.exe
大小: 26462 字节
修改时间: 2007年9月18日, 11:50:58
MD5: 8B78FB7C558AD47A1B867BBC09B0C108
SHA1: 47CA1586A0B1A71B4044E788977ECB690330A67E
CRC32: 9C3C1F50

显示全部楼层 · 发表于 2007-9-18 11:59:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1.rar'
C:\Documents and Settings\Administrator\桌面\1.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年9月18日  11:58
Used time: 00:10 min

The scan has been done completely.

显示全部楼层 · 发表于 2007-9-18 12:00:39

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: bbs.kafan.cn/attachment.php?aid=129178
Information: Is the Trojan horse TR/Crypt.NSPI.Gen

--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.10, VDF 6.39.1.141

显示全部楼层 · 发表于 2007-9-18 12:13:23

红伞报：TR/CRYPT。NSPI。GEN

显示全部楼层 · 发表于 2007-9-18 12:16:07

NSPACK

显示全部楼层 · 发表于 2007-9-18 12:21:21

的确是加了北斗

显示全部楼层 · 发表于 2007-9-18 12:31:09

nod32
D:\Documents and Settings\EKINCHENG\桌面\1.rar - probably a variant of Win32/Delf.NDF worm - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\1.rar » RAR » 1.exe - probably a variant of Win32/Delf.NDF worm

显示全部楼层 · 发表于 2007-9-18 12:58:20

这个我的KIS7.0查不到.被红伞查了

显示全部楼层 · 发表于 2007-9-18 13:41:53

2007-09-18 13:41:20 应用程序保护(运行应用程序) 操作:阻止
进程路径:C:\Program Files\WinRAR\WinRAR.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.453\1.exe

显示全部楼层 · 发表于 2007-9-18 13:47:43

F:\1.rar >>RAR >>1.exe - 可能是 Win32/Delf.NDF 蠕虫的一个变种

[病毒样本] 找到一个

本帖子中包含更多资源

回复 5楼 wangjay1980 的帖子

本帖子中包含更多资源

浏览过的版块