一个包NOD全过

欠妳緈諨

用这一贴庆祝我晋升为知名人士，也可以给NOD增加病毒库！一举两得！

欠妳緈諨

贴个BETA蜘蛛的

aoyang

刚吃了饭，就想睡觉。我们的生活真的充满了阳光啊~~~
啊~~~啊啊~~~啊~~生活真幸福啊~~~
你知道人生的真理吗？吃了就睡，睡了再吃！

taihuxian

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\6ge.rar'
C:\Documents and Settings\user\桌面\6ge.rar
  [0] Archive type: RAR
  --> service.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bhs
  --> setup.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Agent.JM
  --> svohost.exe
      [DETECTION] Is the Trojan horse TR/BHO.AJ.10
  --> update.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Agent.JM
  --> СÓÎÏ·.exe
      [DETECTION] Contains signature of the dropper DR/Boran.AE.54
  --> lsass.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      A backup was created as '468ab23d.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: 2007年4月18日  13:51
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      6 viruses and/or unwanted programs were found
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

bridgewr

微点3个已知

tracydk

原帖由 欠你幸福 于 2007-4-18 13:20 发表
用这一贴庆祝我晋升为知名人士，也可以给NOD增加病毒库！一举两得！

小A不让下

kp2006

已删除: 木马程序 Trojan-Downloader.Win32.Delf.bhs        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/service.exe//PE_Patch.MaskPE
已删除: 木马程序 Backdoor.Win32.Singu.y        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/setup.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan.Win32.BHO.aj        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/svohost.exe
已删除: 木马程序 Backdoor.Win32.Singu.y        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/update.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ae        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/小游戏.exe//data0002
已删除: 木马程序 Trojan.Win32.Delf.sx        文件: D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\6ge.rar/lsass.exe//UPX

红心王子

江民监控拦截：

bridgewr

然后。。。。。。

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-17
Start time: 2007-4-18 15:52
Engine(s): KAV engine (AVK 17.3590), BD-Engine (BD 17.3326)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: lsass.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus could not be removed
        Virus: Trojan.Win32.Delf.sx (KAV engine)
Object: service.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus could not be removed
        Virus: Trojan-Downloader.Win32.Delf.bhs (KAV engine), BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: setup.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus could not be removed
        Virus: Backdoor.Win32.Singu.y (KAV engine)
Object: svohost.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus could not be removed
        Virus: Trojan.Win32.BHO.aj (KAV engine), Adware.BHO.AA (BD-Engine)
Object: update.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus could not be removed
        Virus: Backdoor.Win32.Singu.y (KAV engine), MemScan:Trojan.Dropper.Agent.JM (BD-Engine)
Object: data0002
        In archive: C:\Documents and Settings\Administrator\桌面\6ge\小游戏.exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Boran.ae (KAV engine)
Object: (NSIS o) lzma_nsis0001
        In archive: C:\Documents and Settings\Administrator\桌面\6ge\小游戏.exe
        Status: Virus detected
        Virus: Adware.Boran.AF (BD-Engine)
Object: 小游戏.exe
        Path: C:\Documents and Settings\Administrator\桌面\6ge
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Boran.ae (KAV engine), Adware.Boran.AF (BD-Engine)
Analysis complete: 2007-4-18 15:52
    6 files checked
    6 infected files detected
    0 suspected files detected