[86E6F3 71C8F5]挖掘1

显示全部楼层 · 发表于 2007-9-26 19:20:09

http://bbs.kafan.cn/viewthread.php?tid=135722&extra=page%3D1

显示全部楼层 · 发表于 2007-9-26 19:22:33

占个位，上报

显示全部楼层 · 发表于 2007-9-26 19:24:45

2007-9-26 19:24:02 1190805842 Administrator 2096 Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\virus.rar\down2.exe\[Embedded#DATAINFO]" file.
2007-9-26 19:24:04 1190805844 Administrator 2096 Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\virus.rar\down2.exe" file.
2007-9-26 19:24:05 1190805845 Administrator 2096 Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\virus.rar\du1.cab\Baidu.exe\[Embedded#DATAINFO]" file.
2007-9-26 19:24:05 1190805845 Administrator 2096 Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\virus.rar\du1.cab\Baidu.exe" file.

显示全部楼层 · 发表于 2007-9-26 19:54:44

RS pass..

显示全部楼层 · 发表于 2007-9-26 19:56:56

显示全部楼层 · 发表于 2007-9-26 20:12:20

F:\virus.rar:<RAR>\down2.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)
F:\virus.rar:<RAR>\du1.cab:<CAB>\Baidu.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)

显示全部楼层 · 发表于 2007-9-26 21:37:59

Scan performed at: 2007-9-26 21:37:21
Scanning Log
NOD32 version 2551 (20070926) NT
Command line: C:\Documents and Settings\Don johnson\桌面\virus.rar
Operating memory - is OK

Date: 26.9.2007 Time: 21:37:24
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\virus.rar
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?down2.exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?du1.cab ?CAB ?Baidu.exe - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 21:37:24 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-26 22:43:59

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\virus.rar'
C:\Users\morgan\Documents\
  virus.rar
[0] Archive type: RAR
--> down2.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> du1.cab
      [1] Archive type: CAB (Microsoft)
      --> Baidu.exe
         [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
         [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-26 22:45:41

显示全部楼层 · 发表于 2007-9-27 13:14:06

kv2008正式版

[病毒样本] [86E6F3 71C8F5]挖掘1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源