难得一见的梦幻西游的0329的病毒样本

chenpatrick

ACCESS DENIED
The requested URL could not be retrieved

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.php?aid=233504

The folowing error was encountered:

    * The requested object is INFECTED. The following viruses Trojan-Spy.Win32.Pophot.ana were found

Please contact your service provider if you feel this is incorrect.

KIS7.0.1.325的结果

马力

驱逐舰

solcroft

sam.to

已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.ana        檔案: C:\Documents and Settings\kato9096\桌面\梦幻西游的0329的病毒样本.rar/mcdcsrv32_080329.dll

woai_jolin

Scan Log
Version of virus signature database: 3005 (20080406)
Date: 2008/4/6  Time: 11:31:44
Scanned disks, folders and files: G:\v\梦幻西游的0329的病毒样本.rar
G:\v\梦幻西游的0329的病毒样本.rar » RAR » mcdcsrv32_080329.dll - Win32/Spy.Delf.NHF trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 11:31:44  Total scanning time: 0 sec (00:00:00)

无尽藏海

没开高启……

Begin scan in 'E:\VIRUS\梦幻西游的0329的病毒样本.rar'
E:\VIRUS\梦幻西游的0329的病毒样本.rar
  [0] Archive type: RAR
  --> mcdcsrv32_080329.dll
      [DETECTION] Contains suspicious code HEUR/Malware

上报~

挪威的冬天

信息        2008-04-06  12:46:28        您此次查毒清除了1个病毒                       
信息        2008-04-06  12:46:28        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-04-06  12:46:28        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个                       
信息        2008-04-06  12:46:28        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-04-06  12:46:28        D:\Desktop\ÃλÃÎ÷óÎμÄ0329μÄ2¡¶¾Ñù±¾.rar\mcdcsrv32_080329.dll        Win32.Troj.DownLoaderT.au.539136        清除成功

ztly159

。。。。。。。

tanlimo

ess扫描日志
病毒库版本: 3005 (20080406)
日期: 2008-4-6  时间: 13:58:51
已扫描的磁盘、文件夹和文件: G:\梦幻西游的0329的病毒样本.rar
G:\梦幻西游的0329的病毒样本.rar > RAR > mcdcsrv32_080329.dll - Win32/Spy.Delf.NHF 特洛伊木马
已扫描的对象数: 1
发现的威胁数: 1
完成时间: 13:58:51  总扫描时间: 0 秒 (00:00:00)

Kitman

mcdcsrv32_080329.dll          526.5 KB          UNDER ANALYSIS