U盘自动启动的样本！过小红伞P版！从别人机器感染到我U盘里了

显示全部楼层 · 发表于 2008-5-18 20:51:49

TO KL

显示全部楼层 · 发表于 2008-5-18 20:54:16

显示全部楼层 · 发表于 2008-5-18 23:43:00

过红伞，我是不敢试。

显示全部楼层 · 发表于 2008-5-18 23:46:40

卡巴启发

显示全部楼层 · 发表于 2008-5-19 12:15:40

comodo

显示全部楼层 · 发表于 2008-5-19 16:47:01

19日16：45，用nod32 v3.0.650测试，没发现病毒。

显示全部楼层 · 发表于 2008-5-19 23:30:24

19日下午小红伞已经可以查杀

显示全部楼层 · 发表于 2008-5-20 11:14:29

已刪除: 特洛伊木馬程式 Trojan.Win32.Delf.chw 檔案: C:\Documents and Settings\kato9096\桌面\Plx.rar/Plx.exe

显示全部楼层 · 发表于 2008-5-20 12:01:19

detected: Trojan program Trojan.Win32.Delf.chw URL: http://bbs.kafan.cn/attachment.p ... 1211256054//Plx.exe

显示全部楼层 · 发表于 2008-5-21 08:57:47

星期6，7是休息日，星期一小红伞的结果就出来了：

Print now

Welcome back, Mr li!

Here you can see an overview of all your previous submissions sent from the following address: XXXX@gmail.com

Subject	Submitted on	Answer sent on
[#151657] Upload via Website	18 May 2008 03:11 +0200	19 May 2008 09:18 +0200

1

© Avira GmbH, Lindauer Strasse 21, D-88069 Tettnang
www.avira.com

We received the following archive files:

File ID  Filename Size (Byte) Result
25021882  Plx.rar 168.2 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25021883  Plx.exe  393.5 KB  MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
Plx.exe  MALWARE

The file 'Plx.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Delf.chw. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.57.

Overview

© Avira GmbH, Lindauer Strasse 21, D-88069 Tettnang
www.avira.com

[ 本帖最后由 hooluupig 于 2008-5-21 09:04 编辑 ]

[病毒样本] U盘自动启动的样本！过小红伞P版！从别人机器感染到我U盘里了

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源