3个[MD5: 40DEBB 0A59CE 75C85F]

显示全部楼层 · 发表于 2007-10-14 17:47:18

detected: Trojan program Trojan-PSW.Win32.Delf.aek File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾2.rar/System36.jup//UPX
detected: Trojan program Trojan-PSW.Win32.Delf.aek File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾2.rar/System6.ins

显示全部楼层 · 发表于 2007-10-14 18:23:50

Start of the scan: Sunday, 14 October, 2007  18:23

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\樣本'
C:\Documents and Settings\tim\桌面\樣本\欴掛2.rar
  [0] Archive type: RAR
  --> sv.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> System36.jup
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> System6.ins
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    A backup was created as '474451c4.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Sunday, 14 October, 2007  18:23
Used time: 00:06 min

The scan has been done completely.

   1 Scanning directories
   5 Files were scanned
   2 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-14 18:45:41

NIS2008 2个
Trojan.PWS.QQPass
Virus ID: 28219
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
State: Remove Failed
-----------
1 File
[system36.jup] inside of [c:\users\m\desktop\fa2.rar] - Infected

Downloader
Virus ID: 26637
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus

显示全部楼层 · 发表于 2007-10-14 18:46:40

Result: 2 malware found
Trojan-PSW.Win32.Delf.aek (virus)
C:\Users\Administrator\Desktop\Ñù±¾2.rar\System36.jup
C:\Users\Administrator\Desktop\Ñù±¾2.rar\System6.ins

显示全部楼层 · 发表于 2007-10-14 19:00:00

C:\DOCUME~1\Martin\LOCALS~1\Temp\pzlmkt19.rar » RAR » sv.exe a variant of Win32/PSW.Delf.NIY trojan
C:\DOCUME~1\Martin\LOCALS~1\Temp\pzlmkt19.rar » RAR » System36.jup a variant of Win32/PSW.Delf.NIY trojan
C:\DOCUME~1\Martin\LOCALS~1\Temp\pzlmkt19.rar » RAR » System6.ins probably a variant of Win32/PSW.Delf.NIY trojan

显示全部楼层 · 发表于 2007-10-14 19:22:47

RX19.44.62继续无视中

显示全部楼层 · 发表于 2007-10-14 20:02:21

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 538
Paranoia Database - 10451
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\sv.exe - Infected MalwareDetector:Trojan-Downloader.Agent.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\System36.jup - Infected Win32.Trojan-Downloader.Agent.10
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\System6.ins - Infected Win32.Trojan-PSW.Delf.2

3 Files scanned
3 Infected files found
0 Suspected files found
0 Files cured
3 Files deleted

显示全部楼层 · 发表于 2007-10-14 20:06:59

卡巴斯基杀，诺顿2008过

显示全部楼层 · 发表于 2007-10-14 21:06:35

C:\样本2.rar\sv.exe - infected with Trojan.PWS.Gamania.5195
C:\样本2.rar\System36.jup - infected with Trojan.PWS.Gamania.5195
C:\\样本2.rar\System6.ins - infected with Trojan.PWS.Gamania.5195

Archive contains 3 infected items

DRWEB 4.44 Kill 3

[ 本帖最后由 wangfeng66 于 2007-10-14 21:11 编辑 ]

[病毒样本] 3个[MD5: 40DEBB 0A59CE 75C85F]

本帖子中包含更多资源

EAV

浏览过的版块