Win32:AutoRun-FI

显示全部楼层 · 发表于 2008-2-16 17:28:22

http://bzx.cn
>http://bzx.cn/ip.htm
>>http://www.bzx.cn/ip.exe
>http://www.988258.com/index.htm
>>http://www.988258.com/ip.htm
>>>http://www.bzx.cn/ip.exe

显示全部楼层 · 发表于 2008-2-16 17:30:43

F:\virus\ip.rar » RAR » ip.exe - probably a variant of Win32/Delf.NDF worm

显示全部楼层 · 发表于 2008-2-16 17:31:19

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-2-16, 4:21

Scan name: [Custom Scan]
Path to scan: F:\virus\ip.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-2-16, 17:30:39
---------------------------------------------------------------------

[Found security risk] <W32/AutoRun.B.gen!Eldorado (not disinfectable, generic)> F:\virus\ip.rar->ip.exe->(NSPack)->(PE_Patch)
[Contains infected objects] F:\virus\ip.rar
[Quarantined] F:\virus\ip.rar->ip.exe->(NSPack)->(PE_Patch)

---------------------------------------------------------------------
Scan ended: 2008-2-16, 17:30:45
Duration: 0:00:06

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1

显示全部楼层 · 发表于 2008-2-16 17:35:54

网址就收下了.

显示全部楼层 · 发表于 2008-2-16 17:35:58

ip.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\ip.rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Losabel.v (KAV 引擎), Generic.Malware.SP!Pk!g.A76672D4 (BD 引擎)

显示全部楼层 · 发表于 2008-2-16 17:36:37

Begin scan in 'D:\BOOK\ip.rar'
D:\BOOK\ip.rar
  [0] Archive type: RAR
  --> ip.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-16 19:39:56

FS结果: 找到 1 恶意软件
Trojan-Downloader.Win32.Losabel.v (病毒)
D:\Virus\Test\ip.exe 操作: 删除

显示全部楼层 · 发表于 2008-2-16 20:39:23

ip.rar\ip.exe;C:\Documents and Settings\77\My Documents\ip.rar;Win32.HLLW.Autoruner.1072;;
ip.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2008-2-16 20:41:02

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.DownLoader.f

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.50

显示全部楼层 · 发表于 2008-2-16 20:44:43

[Scanning : C:\Test]

C:\Test\ip.rar<RAR>:ip.exe <- Trojan.Downloader.Losabel.V : No action

Scanned objects : 2

Infected objects : 1

[病毒样本] Win32:AutoRun-FI

本帖子中包含更多资源

3/1