木马样本

显示全部楼层 · 发表于 2007-3-21 13:51:50

木马样本

显示全部楼层 · 发表于 2007-3-21 13:55:46

似乎这个样本看到了好几次。。。。。nod32 found nothing

显示全部楼层 · 发表于 2007-3-21 14:02:49

Check system areas...
Check selected directories and files...
Object: NewInfo.exe
In archive: D:\NewInfo.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.Delf.qc (KAV engine), Trojan.PWS.Delf.HW (BD-Engine)
Object: NewInfo.rar
Path: D:
Status: Virus, file deleted
Virus: Trojan-PSW.Win32.Delf.qc (KAV engine), Trojan.PWS.Delf.HW (BD-Engine)
Analysis complete: 2007-3-21 14:00

显示全部楼层 · 发表于 2007-3-21 14:03:27

食不言，寝不语

[ 本帖最后由 jlennon 于 2007-3-21 18:00 编辑 ]

显示全部楼层 · 发表于 2007-3-21 14:13:30

norton都能检测到

显示全部楼层 · 发表于 2007-3-21 14:14:15

昨天试了下VirusBuster。。。。果然是大名鼎鼎的壳王（其实还不算真正的壳王）

显示全部楼层 · 发表于 2007-3-21 14:20:30

还执行不起来

显示全部楼层 · 发表于 2007-3-21 14:37:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\NewInfo.rar'
C:\Documents and Settings\morgan\My Documents\
  NewInfo.rar
[0] Archive type: RAR
--> NewInfo.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.25812
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-3-21 15:28:49

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-21, 15:28:38
---------------------------------------------------------------------

[Found Trojan] <W32/Trojan.ABGN (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\NewInfo.rar->NewInfo.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\NewInfo.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\NewInfo.rar->NewInfo.exe

显示全部楼层 · 发表于 2007-3-21 15:31:42

nod32不报，金山报

[病毒样本] 木马样本

本帖子中包含更多资源

本帖子中包含更多资源

回复 #4 jlennon 的帖子