2个小毒！

显示全部楼层 · 发表于 2007-10-9 12:02:25

Starting the file scan:

Begin scan in 'E:\2ge.rar'
E:\2ge.rar
  [0] Archive type: RAR
  --> xs170.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> nx.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was moved to '476ffd9c.qua'!

显示全部楼层 · 发表于 2007-10-9 12:02:39

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\2ge.rar'
C:\Users\morgan\Documents\
  2ge.rar
[0] Archive type: RAR
--> xs170.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> nx.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-9 12:41:23

detected: Trojan program Trojan-Downloader.Win32.Delf.chk URL: http://bbs.kafan.cn/attachment.php?aid=137317//xs170.exe
detected: virus Virus.Win32.AutoRun.sw URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-10-9 13:22:22

[Scan path] C:\Documents and Settings\Administrator\桌面\2ge.rar
>C:\Documents and Settings\Administrator\桌面\2ge.rar\xs170.exe - Ok
>>C:\Documents and Settings\Administrator\桌面\2ge.rar\nx.exe infected with Win32.HLLW.Autoruner.origin
C:\Documents and Settings\Administrator\桌面\2ge.rar - archive contains infected objects

显示全部楼层 · 发表于 2007-10-9 13:23:26

Start of the scan: 2007年10月9日  13:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2ge.rar'
C:\Documents and Settings\Administrator\桌面\2ge.rar
  [0] Archive type: RAR
  --> xs170.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> nx.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    A backup was created as '47701096.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-9 14:14:15

C:\nx.exe - infected with Win32.HLLW.Autoruner.694

DRWEB 4.44 只报了一支

显示全部楼层 · 发表于 2007-10-9 14:37:58

扫描开始时间: 2007-10-9 14:37:23
扫描日志
NOD32 版本 2578 (20071008) NT
命令行: C:\Documents and Settings\Administrator\桌面\2ge.rar

日期: 2007年10月9日时间: 14:37:25
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\2ge.rar
C:\Documents and Settings\Administrator\桌面\2ge.rar ?RAR ?nx.exe<病毒 - 可能是 Win32/Genetik 木马变种>
已扫描文件数量: 2
已发现病毒数量: 1
完成时间: 14:37:25 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-10-9 15:13:29

kv

http://bbs.kafan.cn/attachment.php?aid=137317->xs170.exe trojandownloader.delf.ejq 2007-10-9 下午 03:09:22 已删除

显示全部楼层 · 发表于 2007-10-9 15:24:32

微点砍掉

[病毒样本] 2个小毒！

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块