一只老的。。。。

欠妳緈諨

D:\病毒测试\未解压样本\mh0405.zip » ZIP » mh0405.exe - a variant of Win32/Jalous worm

couldsst

BD
C:\a\mh0405.zip=]mh0405.exe Trojan.Delf.AAB

qbter

NOD32 3.0.621

2007-12-31 15:22:04        文件系统实时防护        文件        E:\download\mh0405\mh0405.exe        Win32/Jalous 蠕虫 的变种                NT AUTHORITY\SYSTEM        尝试通过应用程序访问文件时发生事件: D:\Program Files\WinRAR\WinRAR.exe.

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2007-12-31, 5:54

Scan name: 12.31
Path to scan: C:\样本 yangpizhi\12.31\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-12-31, 15:41:38
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\样本 yangpizhi\12.31\mh0405.zip->mh0405.exe->(embedded)
[Contains infected objects]        C:\样本 yangpizhi\12.31\mh0405.zip
[Quarantined]        C:\样本 yangpizhi\12.31\mh0405.zip->mh0405.exe->(embedded)

---------------------------------------------------------------------
Scan ended:        2007-12-31, 15:41:40
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

kkgh

微软补丁被挂马