新威胁1只,快点上报吧...

显示全部楼层 · 发表于 2008-4-26 16:19:28

Begin scan in 'F:\Virus\CHANCHU.zip'
F:\Virus\CHANCHU.zip
  [0] Archive type: ZIP
  --> CHANCHU.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-26 16:20:18

26:04:2008 16:20:07 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\CHANCHU.zip
File scanned: E:\VIRUS\CHANCHU.zip - SIGNATURE FOUND "Trojan.Win32.Small.lw"
26:04:2008 16:20:07 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2008-4-26 16:21:17

Starting the file scan:

Begin scan in 'E:\AV\CHANCHU.zip'
E:\AV\CHANCHU.zip
  [0] Archive type: ZIP
  --> CHANCHU.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-26 16:32:45

00000B00 00401700    0 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
00000B38 00401738    0 netsvcs
00000B40 00401740    0 %SystemRoot%\system32\svchost.exe -k netsvcs
00000BB4 004017B4    0 cmd /c del
00000E10 00401A10    0 [WINDOWS]
00000E1C 00401A1C    0 [SYSTEM32]
00000E2C 00401A2C    0 \cmd.exe
00000E38 00401A38    0 SYSTEM\CurrentControlSet\Services\
00000E5C 00401A5C    0 \Parameters
00003FD0 00403FD0    0 SOFTWARE\Borland\Delphi\RTL
00003FEC 00403FEC    0 FPUMaskValue
0000761C 0040761C    0 SYSTEM\CurrentControlSet\Services\
00007648 00407648    0 \Parameters
00007654 00407654    0 ServiceDll
00007660 00407660    0 Shell_TrayWnd
00009810 00409810    0 HARDWARE\DESCRIPTION\System\CentralProcessor\0
0000A498 0040A498    0 Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE
0000A4E8 0040A4E8    0 C:\Program Files\Internet Explorer\IEXPLORE.EXE
0000AEB4 0040AEB4    0 SYSTEM\CurrentControlSet\Services\
0000AF74 0040AF74    0 SYSTEM\CurrentControlSet\Services\

显示全部楼层 · 发表于 2008-4-26 16:36:55

赛门铁克不报

显示全部楼层 · 发表于 2008-4-26 16:37:45

[Found downloader] <W32/Downloader.C.gen!Eldorado (not disinfectable, generic)> C:\test\CHANCHU.zip->CHANCHU.exe->exefile

显示全部楼层 · 发表于 2008-4-26 16:39:32

上报卡巴

显示全部楼层 · 发表于 2008-4-26 16:41:14

EAV 完全无视！

显示全部楼层 · 发表于 2008-4-26 16:47:03

McAfee found nothing

[病毒样本] 新威胁1只,快点上报吧...

本帖子中包含更多资源

ik

浏览过的版块