样本

显示全部楼层 · 发表于 2007-4-5 13:31:17

这个貌似以前发过了？？？？
Scan performed at: 2007-4-5 13:31:21
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\999.rar
Operating memory - is OK

Date: 5.4.2007 Time: 13:31:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\999.rar
C:\Documents and Settings\EQ2\桌面\999.rar ?RAR ?999.exe - probably a variant of Win32/Spy.Delf.NDZ trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:31:26 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-4-5 13:31:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\999.rar'
C:\Documents and Settings\morgan\My Documents\
  999.rar
[0] Archive type: RAR
--> 999.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-5 13:32:22

finally nod got one
File: 999.rar
Status: INFECTED/MALWARE
MD5 bf719fae7ba58c062cab88afa97c04e9
Packers detected: PE_PATCH, UPACK

Scanner results
Scan taken on 05 Apr 2007 05:30:11 (GMT)
AntiVir Found TR/Delphi.Downloader.Gen
ArcaVir Found Heur.Win32
Avast Found Win32:Agent-EDV
AVG Antivirus Found nothing
BitDefender Found Generic.Malware.BE!dldspg.2FC7027B
ClamAV Found Trojan.Agent-1822
Dr.Web Found MULDROP.Trojan (probable variant)
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found probably a variant of Win32/Spy.Delf.NDZ (probable variant)
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found Packed/Upack
VBA32 Found nothing

显示全部楼层 · 发表于 2007-4-5 13:32:23

TrendMicro PC-cillin 2007 掛了

显示全部楼层 · 发表于 2007-4-5 14:38:48

咖啡報啟發

显示全部楼层 · 发表于 2007-4-5 17:40:14

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-4
Start time: 2007-4-5 17:40
Engine(s): KAV engine (AVK 17.3765), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 999.exe
In archive: C:\Documents and Settings\Administrator\桌面\999.rar
Status: Virus detected
Virus: Generic.Malware.BE!dldspg.2FC7027B (BD-Engine)
Object: 999.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Generic.Malware.BE!dldspg.2FC7027B (BD-Engine)
Analysis complete: 2007-4-5 17:40
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-5 18:16:43

:\WINNT\SYSTEM32\SCRSYS070404.SCR I:\TEST\070405\21\999\999.EXE
:\WINNT\SYSTEM32\ALXRES070404.EXE I:\TEST\070405\21\999\999.EXE
\MYPLAYER.COM I:\TEST\070405\21\999\999.EXE

显示全部楼层 · 发表于 2007-4-5 18:43:10

999.exe - probably a variant of Win32/Spy.Delf.NDZ 木马

显示全部楼层 · 发表于 2007-4-5 19:01:38

已上报了...

[病毒样本] 样本

本帖子中包含更多资源

本帖子中包含更多资源

微点报未知木马

本帖子中包含更多资源