NOD32 Found probably unknown NewHeur_PE

显示全部楼层 · 发表于 2007-3-27 12:53:34

NOD32 Found probably unknown NewHeur_PE
转绅博

显示全部楼层 · 发表于 2007-3-27 12:53:56

File:  htm.rar
Status:  INFECTED/MALWARE
MD5  d72af0b8d7eb3809a1450de35e9dd5fd
Packers detected:  PE_PATCH.UPX, UPX

Scanner results
Scan taken on 27 Mar 2007 04:51:31 (GMT)
AntiVir  Found TR/Delphi.Downloader.Gen
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found Generic.Malware.Fdld.77E2BEE3 (probable variant)
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found Possibly a new variant of W32/Blocker-based!Maximus
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-3-27 13:11:37

木马名称:Trojan-Downloader.Win32.Delf.ewj

程序:
C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\RAR$EX00.432\HTM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
微点是已知的了~~呵呵!微点加油

显示全部楼层 · 发表于 2007-3-27 13:31:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\htm.rar'
C:\Documents and Settings\morgan\My Documents\
  htm.rar
[0] Archive type: RAR
--> htm.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-27 14:00:07

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-27, 3:05

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\htm.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-27, 13:59:34
---------------------------------------------------------------------

[Found possible virus] <W32/Blocker-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\htm.rar->htm.exe->(UPX)
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\htm.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\htm.rar->htm.exe->(UPX)

---------------------------------------------------------------------
Scan ended: 2007-3-27, 13:59:36
Duration: 0:00:02

Scan result:

Scanned files:    1
Infected objects:    1
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-3-27 17:49:04

卡巴不报警...

显示全部楼层 · 发表于 2007-3-27 17:49:54

红伞继续杀！

显示全部楼层 · 发表于 2007-3-27 18:22:34

活样本，看来NOD32这一枪发中了

显示全部楼层 · 发表于 2007-3-27 19:03:10

扫描系统区域...
扫描所选择的目录和文件...
对象: htm.exe
在压缩档案里: F:\virus8\htm.rar
Status: 可疑病毒
病毒: Generic.Malware.Fdld.77E2BEE3 (BD 引擎)
对象: htm.rar
路径: F:\virus8
Status: 可疑病毒
病毒: Generic.Malware.Fdld.77E2BEE3 (BD 引擎)
扫描完成: 2007-3-27 19:03
已检查 1 个文件
已发现 0 个染毒文件
发现 1 个可疑文件

显示全部楼层 · 发表于 2007-3-27 20:25:56

kv

在 D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\htm.rar->htm.exe 中发现 TrojanDownloader.Delf.aon 病毒, 已删除

NOD32 Found probably unknown NewHeur_PE

本帖子中包含更多资源

本帖子中包含更多资源