zhelatin 5f63ba

显示全部楼层 · 发表于 2007-10-11 12:46:15

扫描进行于：2007-10-11 12:46:06
扫描日志
NOD32版本 2582 (20071009) NT
命令行： C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\26(2).rar

日期： 11.10.2007 时间：12:46:09
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\26(2).rar
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\26(2).rar >>RAR >>26.exe - Win32/Nuwar.Gen 蠕虫
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 12:46:10 总扫描时间：1 秒 (00:00:01)

显示全部楼层 · 发表于 2007-10-11 12:51:30

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=138064 is infected with Email-Worm.Win32.Zhelatin.kl virus

显示全部楼层 · 发表于 2007-10-11 12:51:46

Result: 1 malware found
Email-Worm.Win32.Zhelatin.kl (virus)
C:\Users\Administrator\Desktop\26.rar\26.exe

显示全部楼层 · 发表于 2007-10-11 12:53:12

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\26.rar'
C:\Users\morgan\Documents\
  26.rar
  26.rar:Zone.Identifier
[0] Archive type: RAR
--> 26.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-11 14:43:08

微点砍掉

显示全部楼层 · 发表于 2007-10-11 15:36:21

原帖由 啊弥陀佛 于 2007-10-11 14:43 发表
微点砍掉

楼上微点是不是不太喜欢更新

我的已知Worm name:Worm.Win32.Nuwar.ba
program(s):
26.EXE
Is worm program(s)!
Successful in stopping running, Delete the file?

显示全部楼层 · 发表于 2007-10-11 16:40:52

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 443
Paranoia Database - 7092
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\26.exe

C:\Documents and Settings\uhthn\Desktop\26.exe - Infected Generic.Malware.e54

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-10-11 16:44:15

Win32:Tibser

[病毒样本] zhelatin 5f63ba

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源