搜索
查看: 2012|回复: 9
收起左侧

NOD32 Found probably unknown NewHeur_PE

[复制链接]
观弈书童
发表于 2007-3-27 12:53:34 | 显示全部楼层 |阅读模式
NOD32  Found probably unknown NewHeur_PE
转绅博

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
观弈书童
 楼主| 发表于 2007-3-27 12:53:56 | 显示全部楼层
File:  htm.rar  
Status:  INFECTED/MALWARE  
MD5  d72af0b8d7eb3809a1450de35e9dd5fd  
Packers detected:  PE_PATCH.UPX, UPX

Scanner results  
Scan taken on 27 Mar 2007 04:51:31 (GMT)  
AntiVir  Found TR/Delphi.Downloader.Gen  
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found Generic.Malware.Fdld.77E2BEE3 (probable variant)  
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found Possibly a new variant of W32/Blocker-based!Maximus  
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably unknown NewHeur_PE (probable variant)  
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing
Anycall-D908
发表于 2007-3-27 13:11:37 | 显示全部楼层
木马名称:Trojan-Downloader.Win32.Delf.ewj

程序:
C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\RAR$EX00.432\HTM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
微点是已知的了~~呵呵!微点加油
mofunzone
发表于 2007-3-27 13:31:50 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\htm.rar'
C:\Documents and Settings\morgan\My Documents\
  htm.rar
    [0] Archive type: RAR
    --> htm.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!
jlennon
头像被屏蔽
发表于 2007-3-27 14:00:07 | 显示全部楼层
-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-3-27, 3:05

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\htm.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-3-27, 13:59:34
---------------------------------------------------------------------

[Found possible virus]         <W32/Blocker-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\htm.rar->htm.exe->(UPX)
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\htm.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\htm.rar->htm.exe->(UPX)

---------------------------------------------------------------------
Scan ended:        2007-3-27, 13:59:36
Duration:        0:00:02

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------
gggh
发表于 2007-3-27 17:49:04 | 显示全部楼层
卡巴不报警...
KAV-Longhorn
发表于 2007-3-27 17:49:54 | 显示全部楼层
红伞继续杀!
solcroft
发表于 2007-3-27 18:22:34 | 显示全部楼层
活样本,看来NOD32这一枪发中了

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
电影结束了
发表于 2007-3-27 19:03:10 | 显示全部楼层
扫描系统区域...
扫描所选择的目录和文件...
对象: htm.exe
        在压缩档案里: F:\virus8\htm.rar
        Status: 可疑病毒
        病毒: Generic.Malware.Fdld.77E2BEE3 (BD 引擎)
对象: htm.rar
        路径: F:\virus8
        Status: 可疑病毒
        病毒: Generic.Malware.Fdld.77E2BEE3 (BD 引擎)
扫描完成: 2007-3-27 19:03
    已检查 1 个文件
    已发现 0 个染毒文件
    发现 1 个可疑文件
kp2006
头像被屏蔽
发表于 2007-3-27 20:25:56 | 显示全部楼层
kv

在 D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\htm.rar->htm.exe 中发现 TrojanDownloader.Delf.aon 病毒, 已删除
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-9-18 01:09 , Processed in 0.049621 second(s), 6 queries , MemCache On.

快速回复 返回顶部 返回列表