348627.过卡6!

显示全部楼层 · 发表于 2007-9-26 18:11:09

2007-9-26 18:10:52 1190801453 SYSTEM 1304 Sign of "Win32:Delf-FYB [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=132153\pk.exe\[UPX]" file.

显示全部楼层 · 发表于 2007-9-26 18:17:26

被Norton AntiVirus 2005 杀掉了

显示全部楼层 · 发表于 2007-9-26 18:25:02

创建D:\WINDOWS\SYSTEM32\DELEDOMN.BAT

瑞星2008主动防御报生成物为恶意代码

[ 本帖最后由 kp2006 于 2007-9-26 18:27 编辑 ]

显示全部楼层 · 发表于 2007-9-26 18:25:26

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 254
Paranoia Database - 5836
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\pk.exe

C:\Documents and Settings\uhthn\Desktop\pk.exe - Suspicious of Win32.Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-26 18:35:05

Begin scan in 'C:\Documents and Settings\dell\桌面\pk.rar'
C:\Documents and Settings\dell\桌面\pk.rar
  [0] Archive type: RAR
  --> pk.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-26 18:39:22

没报

显示全部楼层 · 发表于 2007-9-26 21:40:51

Scan performed at: 2007-9-26 21:40:29
Scanning Log
NOD32 version 2551 (20070926) NT
Command line: C:\Documents and Settings\Don johnson\桌面\pk.rar
Operating memory - is OK

Date: 26.9.2007 Time: 21:40:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\pk.rar
C:\Documents and Settings\Don johnson\桌面\pk.rar ?RAR ?pk.exe - probably a variant of Win32/TrojanDownloader.Delf.NSA trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:40:32 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-26 22:33:46

卡巴 7.0.0.125 高启发
已检测到: 病毒 Heur.Trojan.Generic (变种) URL: http://bbs.kafan.cn/attachment.php?aid=132153//pk.exe

显示全部楼层 · 发表于 2007-9-27 10:14:20

微点发现新间谍

[病毒样本] 348627.过卡6!

本帖子中包含更多资源

本帖子中包含更多资源