这是什么东西？请高手过来分析

显示全部楼层 · 发表于 2007-10-24 23:33:56

是不是病毒啊？

显示全部楼层 · 发表于 2007-10-24 23:40:59

卡巴 125

已检测到: 木马程序 Trojan-Spy.Win32.Delf.bcl URL: http://bbs.kafan.cn/attachment.php?aid=143780//setupe1.exe//ASPack

显示全部楼层 · 发表于 2007-10-24 23:41:15

已被KV2007和微点确认为木马病毒。

显示全部楼层 · 发表于 2007-10-25 00:12:33

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 667
Paranoia Database - 48130
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\setupe1.exe

C:\Documents and Settings\Uhthn\Desktop\setupe1.exe - Suspected MaliciousScope:WIN32.GENERIC.PSW.8

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-25 00:17:08

小红伞杀
Virus or unwanted program 'TR/Spy.Delf.bcl [TR/Spy.Delf.bcl]'
detected in file 'C:\Documents and Settings\0564\Local Settings\Temporary Internet Files\Content.IE5\GTOJY5IZ\setupe1[1].rar.
Action performed: Delete file

Virus or unwanted program 'TR/Spy.Delf.bcl [TR/Spy.Delf.bcl]'
detected in file 'C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Premium\TEMP\AVGUARD_472696cd\AV00000688$00000001.AV$.
Action performed: Delete file

Virus or unwanted program 'TR/Spy.Delf.bcl [TR/Spy.Delf.bcl]'
detected in file 'C:\Documents and Settings\0564\Local Settings\Temporary Internet Files\Content.IE5\GTOJY5IZ\setupe1[1].rar.
Action performed: Delete file

显示全部楼层 · 发表于 2007-10-25 02:06:08

Spy/Delf

显示全部楼层 · 发表于 2007-10-25 07:15:23

和這帖同一隻，樓主重複發了！

http://bbs.kafan.cn/viewthread.php?tid=146223

一樣是"調適系統內核"的病毒，需等20~30分鐘，

才會發作！

[ 本帖最后由 a256886572008 于 2007-10-25 07:16 编辑 ]

显示全部楼层 · 发表于 2007-10-25 09:02:25

Trojan.Adclicker

显示全部楼层 · 发表于 2007-10-25 13:06:09

很明显是木马！

显示全部楼层 · 发表于 2007-10-25 13:10:22

Start of the scan: Thursday, 25 October, 2007  13:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\setupe1.rar'
C:\Documents and Settings\tim\桌面\setupe1.rar
  [0] Archive type: RAR
  --> setupe1.exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.bcl
   [INFO]    A backup was created as '47942589.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Thursday, 25 October, 2007  13:09
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

[可疑文件] 这是什么东西？请高手过来分析

本帖子中包含更多资源

飞塔

本帖子中包含更多资源

浏览过的版块