邮件里的下载者[22点 N家可以检测到了]

qianwenxiang

发件人：Ron Boykin <mircea.danby@yorkies98.fsnet.co.uk>
时   间：2007年12月16日(星期天) 下午02:51 收件人：

Hi, old chap!
Tanya sent you animated card with her photos. You can check card in your attachment.
--
Best regards
?Adult Sex Finder

attachment: card.zip


生成物也扔上来了

程序运行时扫描avast 报错汗

[ 本帖最后由 qianwenxiang 于 2007-12-16 22:42 编辑 ]

挪威的冬天

scr ？

金山 miss

BING126

McAfee 扫描没发现！

qigang

给你张贺卡而已，没问题啊！

qigang

Antivirus	Version	Last Update	Result
AhnLab-V3	-	-	-
AntiVir	-	-	-
Authentium	-	-	-
Avast	-	-	-
AVG	-	-	-
BitDefender	-	-	-
CAT-QuickHeal	-	-	-
ClamAV	-	-	-
DrWeb	-	-	-
eSafe	-	-	-
eTrust-Vet	-	-	-
Ewido	-	-	-
FileAdvisor	-	-	-
Fortinet	-	-	-
F-Prot	-	-	-
F-Secure	-	-	-
Ikarus	-	-	-
Kaspersky	-	-	-
McAfee	-	-	-
Microsoft	-	-	-
NOD32v2	-	-	-
Norman	-	-	-
Panda	-	-	-
Prevx1	-	-	-
Rising	-	-	-
Sophos	-	-	-
Sunbelt	-	-	-
Symantec	-	-	-
TheHacker	-	-	-
VBA32	-	-	-
VirusBuster	-	-	-
Webwasher-Gateway	-	-	Win32.Malware.gen!94 (suspicious)

Additional information

MD5: 7b18de1a13e047c81f079e794625ed42

qianwenxiang

原帖由 qigang 于 2007-12-16 20:48 发表
给你张贺卡而已，没问题啊！

no no no ~是下载者

挪威的冬天

信息        2007-12-16  21:54:29        您此次查毒共查出1个病毒以及危险代码                       
信息        2007-12-16  21:54:29        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件4个                       
信息        2007-12-16  21:54:29        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-16  21:54:29        C:\Documents and Settings\Norways Winter\桌面\system2.rar\runtime.sys        Win32.TrojDownloader.Agent.5504        跳过，未处理

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\system2.rar'
E:\Virus\system2.rar
  [0] Archive type: RAR
  --> runtime.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.DPE.1
  --> Lrw52.sys
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 17968265.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING]   The file was ignored!

第1个没报~ 已上报~

[ 本帖最后由 Graybird 于 2007-12-16 21:58 编辑 ]

红伞过了…………

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.gbu        URL: http://bbs.kafan.cn/attachment.php?aid=169533/card.scr
detected: Trojan program Trojan-Downloader.Win32.Agent.dpe        URL: http://bbs.kafan.cn/attachment.php?aid=169570//runtime.sys


detected: Trojan program Trojan-Downloader.Win32.Agent.dpe File: C:\Documents and Settings\Owner\×ÀÃæ\system2.rar/runtime.sys
detected: Trojan program Trojan-Downloader.Win32.Diehard.cp File: C:\Documents and Settings\Owner\×ÀÃæ\system2.rar/Lrw52.sys
detected: Trojan program Trojan-Downloader.Win32.Diehard.cp File: C:\Documents and Settings\Owner\×ÀÃæ\system2.rar/17968265.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.gbu File: C:\Documents and Settings\Owner\×ÀÃæ\card.zip/card.scr


卡巴18点病毒库就杀了

[ 本帖最后由 wangjay1980 于 2007-12-16 22:03 编辑 ]