Trojan-Downloader.Win32.Delf.epw X2

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.epw        檔案: C:\Documents and Settings\kato9096\桌面\2.rar/update.exe3//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.epw        檔案: C:\Documents and Settings\kato9096\桌面\2.rar/.exe2//PE_Patch//UPack

流清泉

来个
http://lx112112.kki.cn/mm.exe

sam.to

原帖由 流清泉 于 2008-3-9 18:06 发表
来个
http://lx112112.kki.cn/mm.exe

打包，上报卡巴

The EQs

C:\Documents and Settings\Don johnson\桌面\2.rar » RAR » update.exe3 - Win32/TrojanDownloader.Delf.OBY trojan
C:\Documents and Settings\Don johnson\桌面\2.rar » RAR » .exe2 - a variant of Win32/TrojanDownloader.Delf.OBY trojan

Palkia

C:\Documents and Settings\Administrator\桌面\2.rar>>.exe2        TrojanDownloader.Delf.epw.flzu        木马        还未处理
C:\Documents and Settings\Administrator\桌面\2.rar>>update.exe3        TrojanDownloader.Delf.epw.tmkj        木马        还未处理

hj5abc

file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-8.jpgfile:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-9.jpgSign of "Win32:Delf-IOR [Trj]" has been found in "F:\2.rar\update.exe3\[Upack]\[Embedded#IFTDLL]" file.  
Sign of "Win32:Delf-IOR [Trj]" has been found in "F:\2.rar\.exe2\[Upack]\[Embedded#IFTDLL]" file.

to 2L.


[ 本帖最后由 hj5abc 于 2008-3-9 18:15 编辑 ]

Palkia

mm.exe~
盗QQ的~







[ 本帖最后由 tvuser2007 于 2008-3-9 18:22 编辑 ]

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-9, 2:48

Scan name: virus
Path to scan: C:\Documents and Settings\Administrator\桌面\virus\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-9, 18:49:04
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\virus\2.rar->update.exe3->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\virus\2.rar->.exe2->(UPack)
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\virus\2.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\virus\2.rar->.exe2->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-3-9, 18:49:09
Duration:        0:00:04

Scan result:

Scanned files:                 6
Infected objects:         2
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

qigang

9/0

rising20.34.62未杀！

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Direct.me
病毒： Trojan.DL.Win32.Undef.bv

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.34.62