MD5: 3D9FF1 F7EEB2

显示全部楼层 · 发表于 2007-12-24 14:28:41

Hello,
host1.exe_ - Trojan.Win32.Agent.dod
Hello.
Worm.Win32.AutoRun.bee
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由自由于 2007-12-24 14:44 编辑 ]

显示全部楼层 · 发表于 2007-12-24 14:30:06

Starting the file scan:

Begin scan in 'E:\桌面.zip'
E:\桌面.zip
  [0] Archive type: ZIP
  --> down.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-12-24 14:31:32

卡巴斯基反病毒软件 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=173534 is infected with Worm.Win32.AutoRun.bee virus

显示全部楼层 · 发表于 2007-12-24 14:31:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\��.zip'
C:\Documents and Settings\Administrator\My Documents\
  ��.zip
[0] Archive type: ZIP
--> down.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> host1.exe
   [WARNING] The file was ignored!

End of the scan: 2007年12月23日  22:31
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-24 14:34:24

File: host1.exe
Status: INFECTED/MALWARE
MD5: 3d9ff15a89105551d2462f53627ea485
Packers detected: -
Bit9 reports: File not found

Scanner results
Scan taken on 24 Dec 2007 06:32:14 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
CPsecure Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Ikarus Found nothing
Kaspersky Anti-Virus Found Trojan.Win32.Agent.dod
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

显示全部楼层 · 发表于 2007-12-24 14:38:52

comodo v3
down.exe malware

显示全部楼层 · 发表于 2007-12-24 15:53:54

扫描报告
2007年12月23日 23:53:38 - 23:53:38
计算机名称: XING-PC
扫描类型: 扫描指定目标
目标: C:\Users\Xing\Desktop\Downloads\桌面.zip

--------------------------------------------------------------------------------

结果: 发现2个恶意软件
Worm.Win32.AutoRun.bee (病毒)
C:\Users\Xing\Desktop\Downloads\桌面.zip\down.exe
Trojan.Win32.Agent.dod (病毒)
C:\Users\Xing\Desktop\Downloads\桌面.zip\host1.exe

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 3
未扫描: 0
结果:
病毒: 2
间谍软件: 0
可疑对象: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
引导区:
已扫描: 0
受感染: 0
可疑对象: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
病毒定义版本:
病毒: 2007-12-24_02
间谍软件: 2007-12-24_02
扫描引擎:
F-Secure AVP: 7.00.171, 2007-12-24
F-Secure Libra: 2.04.01, 2007-12-20
F-Secure Orion: 1.02.37, 2007-12-24
F-Secure Draco: 1.00.35, 2007-11-28
扫描选项:
扫描指定类型的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ SWF ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描压缩包内部
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

--------------------------------------------------------------------------------

版权 © 1998-2007 产品支持 | 发送病毒样本到 F-Secure
对于 F-Secure 网页上所链接的由第三方创建和发布的材料， F-Secure 不承担任何责任。除非已通过电子邮件或 F-Secure CGI 电子邮件向任一台服务器提交材料以清楚说明情况，您同意通过 F-Secure 网页或硬拷贝发布已有的材料。单击带下划线的链接，可访问 F-Secure 公共网站。此时，系统会在专用访问统计信息中用域名记录您的访问。此信息不会提供给任何第三方。您同意不针对所提交的材料向我们提出诉讼。除非您已明确说明，否则应提交材料以保证 F-Secure 针对可能在 F-Secure 产品/出版物中采用的概念，不承担任何责任。

显示全部楼层 · 发表于 2007-12-24 16:32:55

down.exe Win32:Delf-FKN [Trj]

显示全部楼层 · 发表于 2007-12-24 17:00:59

NIS2008
扫描统计:
扫描时间: 1秒
扫描选项:
扫描目标: E:\桌面.zip
计数:
扫描的项目总数: 4
- 文件和目录: 4
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 1
已解决的项目总数: 1
需要注意的项目总数: 0

已解决的风险:
W32.SillyDC
病毒 ID: 11498
类型: 已压缩
风险: 高 (高隐蔽性，高清除可能，高性能，高隐私)
类别: 病毒
状态: 完全解决
-----------
1 文件
[down.exe] 位于[e:\桌面.zip] - 已删除

显示全部楼层 · 发表于 2007-12-24 17:05:06

  偶尔也小宇宙爆发下

信息 2007-12-24  17:04:33 您此次查毒共查出2个病毒以及危险代码
信息 2007-12-24  17:04:33 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件5个
信息 2007-12-24  17:04:33 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2007-12-24  17:04:33 C:\Documents and Settings\Norways_Winter\桌面\桌面.zip\host1.exe Win32.Troj.StartPage.31744 跳过，未处理
病毒 2007-12-24  17:04:33 C:\Documents and Settings\Norways_Winter\桌面\桌面.zip\down.exe Win32.TrojDownloader.Agent.138240 跳过，未处理

[病毒样本] MD5: 3D9FF1 F7EEB2

本帖子中包含更多资源

avast!