1个

显示全部楼层 · 发表于 2008-6-24 00:26:27

Antivirus Version Last Update Result
AhnLab-V3 2008.6.22.0 2008.06.23 -
AntiVir 7.8.0.59 2008.06.23 TR/Proxy.Delf.CA
Authentium 5.1.0.4 2008.06.21 W32/Downloader.H.gen!Eldorado
Avast 4.8.1195.0 2008.06.23 Win32:Baidubar-B
AVG 7.5.0.516 2008.06.23 Downloader.Adload.MI
BitDefender 7.2 2008.06.23 -
CAT-QuickHeal 9.50 2008.06.23 (Suspicious) - DNAScan
ClamAV 0.93.1 2008.06.23 -
DrWeb 4.44.0.09170 2008.06.23 Adware.Baidu.463
eSafe 7.0.15.0 2008.06.23 suspicious Trojan/Worm
eTrust-Vet 31.6.5897 2008.06.23 -
Ewido 4.0 2008.06.23 -
F-Prot 4.4.4.56 2008.06.21 W32/Downloader.H.gen!Eldorado
F-Secure 7.60.13501.0 2008.06.20 -
Fortinet 3.14.0.0 2008.06.23 -
GData 2.0.7306.1023 2008.06.23 Win32:Baidubar-B
Ikarus T3.1.1.26.0 2008.06.23 Virus.Win32.QQRob.AS
Kaspersky 7.0.0.125 2008.06.23 Heur.Downloader
McAfee 5323 2008.06.23 potentially unwanted program Adware-BDSearch
Microsoft 1.3604 2008.06.23 Trojan:Win32/MotePro
NOD32v2 3209 2008.06.23 -
Norman 5.80.02 2008.06.23 -
Panda 9.0.0.4 2008.06.22 Suspicious file
Prevx1 V2 2008.06.23 -
Rising 20.50.02.00 2008.06.23 Trojan.DL.Win32.Undef.tg
Sophos 4.30.0 2008.06.23 Mal/Ejik-A
Sunbelt 3.0.1153.1 2008.06.15 VIPRE.Suspicious
Symantec 10 2008.06.23 -
TheHacker 6.2.92.358 2008.06.21 -
TrendMicro 8.700.0.1004 2008.06.23 PAK_Generic.002
VBA32 3.12.6.8 2008.06.23 -
VirusBuster 4.5.11.0 2008.06.23 Packed/FSG
Webwasher-Gateway 6.6.2 2008.06.23 Trojan.Proxy.Delf.CA

已上报到卡巴分析.

显示全部楼层 · 发表于 2008-6-24 09:31:10

Begin scan in 'C:\Documents and Settings\haha\桌面\bd.zip'
C:\Documents and Settings\haha\桌面\bd.zip
  [0] Archive type: ZIP
  --> 105.exe2
   [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
   [NOTE]    A backup was created as '488e4eb2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-24 10:40:57

F:\105.exe TrojanProxy.Delf.CA.mrwb 木马

显示全部楼层 · 发表于 2008-6-24 10:45:54

微点砍掉

显示全部楼层 · 发表于 2008-6-24 11:23:39

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-6-24 11:24:40

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.udk 檔案: C:\Documents and Settings\kato9096\桌面\bd.zip/105.exe2//FSG

显示全部楼层 · 发表于 2008-6-24 11:26:37

File bd.zip received on 06.24.2008 05:25:24 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 21/33 (63.64%)
Loading server information...
Your file is queued in position: ___.
Estimated start time is between ___ and ___ .
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Compact
Print results Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:

Antivirus Version Last Update Result
AhnLab-V3 2008.6.24.0 2008.06.23 -
AntiVir 7.8.0.59 2008.06.23 TR/Proxy.Delf.CA
Authentium 5.1.0.4 2008.06.24 W32/Downloader.H.gen!Eldorado
Avast 4.8.1195.0 2008.06.23 Win32:Baidubar-B
AVG 7.5.0.516 2008.06.24 Downloader.Adload.MI
BitDefender 7.2 2008.06.24 -
CAT-QuickHeal 9.50 2008.06.23 (Suspicious) - DNAScan
ClamAV 0.93.1 2008.06.24 -
DrWeb 4.44.0.09170 2008.06.23 Adware.Baidu.463
eSafe 7.0.15.0 2008.06.23 suspicious Trojan/Worm
eTrust-Vet 31.6.5897 2008.06.23 -
Ewido 4.0 2008.06.23 -
F-Prot 4.4.4.56 2008.06.23 W32/Downloader.H.gen!Eldorado
F-Secure 7.60.13501.0 2008.06.20 -
Fortinet 3.14.0.0 2008.06.23 Adware/Ejik
GData 2.0.7306.1023 2008.06.24 Win32:Baidubar-B
Ikarus T3.1.1.26.0 2008.06.24 Virus.Win32.QQRob.AS
Kaspersky 7.0.0.125 2008.06.24 Trojan-Downloader.Win32.Agent.udk
McAfee 5323 2008.06.23 potentially unwanted program Adware-BDSearch
Microsoft 1.3604 2008.06.24 Trojan:Win32/MotePro
NOD32v2 3211 2008.06.24 -
Norman 5.80.02 2008.06.23 -
Panda 9.0.0.4 2008.06.23 Suspicious file
Prevx1 V2 2008.06.24 -
Rising 20.50.02.00 2008.06.23 Trojan.DL.Win32.Undef.tg
Sophos 4.30.0 2008.06.24 Mal/Ejik-A
Sunbelt 3.0.1153.1 2008.06.15 VIPRE.Suspicious
Symantec 10 2008.06.24 -
TheHacker 6.2.92.359 2008.06.24 -
TrendMicro 8.700.0.1004 2008.06.23 PAK_Generic.002
VBA32 3.12.6.8 2008.06.23 -
VirusBuster 4.5.11.0 2008.06.23 Packed/FSG
Webwasher-Gateway 6.6.2 2008.06.24 Trojan.Proxy.Delf.CA

显示全部楼层 · 发表于 2008-6-24 15:40:16

显示全部楼层 · 发表于 2008-6-24 20:12:19

http://www.threatexpert.com/repo ... 6526fbb99daad7264cb

显示全部楼层 · 发表于 2008-6-24 20:14:10

D:\download\bd.zip>>105.exe2 TrojanProxy.Delf.CA.mrwb 木马还未处理

[病毒样本] 1个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源