一样本~~

显示全部楼层 · 发表于 2007-4-17 20:45:46

1111111111111

显示全部楼层 · 发表于 2007-4-17 20:47:31

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-17
Start time: 2007-4-17 20:47
Engine(s): KAV engine (AVK 17.3590), BD-Engine (BD 17.2635)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: down.exe
In archive: C:\Documents and Settings\Administrator\桌面\down.rar
Status: Suspected virus
Virus: BehavesLike:Win32.RemoteInjector (BD-Engine)
Object: down.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus, file deleted
Virus: BehavesLike:Win32.RemoteInjector (BD-Engine)
Analysis complete: 2007-4-17 20:47
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-17 20:49:15

过咔吧

显示全部楼层 · 发表于 2007-4-17 20:58:11

Scanning Log
NOD32 version 2197 (20070417) NT
Command line: C:\Documents and Settings\Administrator. ?
?DD55774F18A2454\桌面\down.rar
Checking CRC of NOD32.EXE: Status OK
C:\Program Files\Eset\nod32.exe - is OK
Operating memory is OK.
MBR sector of the 1. physical disk is OK.
Active boot sector of the 1. physical disk is OK.
Date: 17.4.2007  Time: 20:57:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\Administrator.DD55774F18A2454\桌面\down.rar
C:\Documents and Settings\Administrator.DD55774F18A2454\ ?
?桌面\down.rar ?RAR ?down.exe - a variant of  ?
?Win32/TrojanDownloader.Delf.NJH trojan
C:\Documents and Settings\Administrator.DD55774F18A2454\ ?
?桌面\down.rar:Zone.Identifier - is OK
Number of scanned files: 2
Number of threats found: 1
Time of completion: 20:57:23 Total scanning time: 0 sec  ?
?(00:00:00)

显示全部楼层 · 发表于 2007-4-17 20:58:17

NOD32拿下

D:\病毒测试\未解压\down.rar ?RAR ?down.exe - Win32/TrojanDownloader.Delf.NJH 木马变种

显示全部楼层 · 发表于 2007-4-17 21:04:17

蜘蛛启发？

显示全部楼层 · 发表于 2007-4-17 21:10:31

KIS不报

显示全部楼层 · 发表于 2007-4-17 21:46:06

down？？？貌似偶上报N回了。。不报真是太那个了

显示全部楼层 · 发表于 2007-4-17 22:04:54

原帖由 hkt988 于 2007-4-17 22:19 发表
过咔吧

未必

显示全部楼层 · 发表于 2007-4-17 22:53:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\down.rar'
C:\Documents and Settings\morgan\My Documents\
  down.rar
[0] Archive type: RAR
--> down.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 一样本~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源