Virus.Win32.Downloader.N感染的

显示全部楼层 · 发表于 2007-10-17 17:08:15

A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found W32.Dr.Agent.Bsv
Avast	Found Win32:Delf-GAM
AVG Antivirus	Found Win32/Mypis
BitDefender	Found Trojan.Downloader.Patched.B
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Trojan.Starter.261
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Virus.Win32.Downloader.n
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Virus.Win32.Downloader.n
NOD32	Found nothing
Norman Virus Control	Found W32/Mypis.gen1
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found Win32.DL.Agent.VEI
VBA32	Found Win32.Trojan.Downloader (http://...) (probable variant)

显示全部楼层 · 发表于 2007-10-17 17:27:50

误报

显示全部楼层 · 发表于 2007-10-17 17:29:34

Result: 1 malware found
Virus.Win32.Downloader.n (virus)
C:\Users\Administrator\Desktop\ahnreport.rar\ahnreport.exe

显示全部楼层 · 发表于 2007-10-17 17:43:52

一个下载者

会下载http://qqq.testkl.cn/main.exe

而且会在X:\Program Files\Common Files生成win.exe。。。。。

[ 本帖最后由 EQ2 于 2007-10-17 17:54 编辑 ]

显示全部楼层 · 发表于 2007-10-17 19:54:12

rs挂了

显示全部楼层 · 发表于 2007-10-17 21:38:27

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 591
Paranoia Database - 40838
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\ahnreport.exe

C:\Documents and Settings\uhthn\Desktop\ahnreport.exe - Infected Trojan.vb.a

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-10-17 23:03:52

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\WIN.zip'
C:\Users\morgan\Documents\
  WIN.zip
  WIN.zip:Zone.Identifier
[0] Archive type: ZIP
--> WIN.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Users\morgan\Documents\ahnreport.rar'
C:\Users\morgan\Documents\
  ahnreport.rar
  ahnreport.rar:Zone.Identifier
[0] Archive type: RAR
--> ahnreport.exe
Begin scan in 'C:\Users\morgan\Documents\main.zip'
C:\Users\morgan\Documents\
  main.zip
  main.zip:Zone.Identifier
[0] Archive type: ZIP
--> main.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-18 00:12:23

detected: virus Virus.Win32.Downloader.n File: C:\Documents and Settings\Owner\×ÀÃæ\WIN.zip/WIN.exe//PE_Patch.UPX//UPX
detected: virus Virus.Win32.Downloader.n File: C:\Documents and Settings\Owner\×ÀÃæ\main.zip/main.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-10-18 00:12:37

W32.Mumawow.F!inf

显示全部楼层 · 发表于 2007-10-18 10:06:02

微点主动防御发现新的间谍威胁！

[病毒样本] Virus.Win32.Downloader.N感染的

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源