下载某软件时捆绑的木马

显示全部楼层 · 发表于 2007-5-5 23:38:39

卡巴斯基反病毒 7.0 测试版
The requested URL http://bbs.kafan.cn/attachment.php?aid=64565 is infected with Trojan-Spy.Win32.Delf.ps virus

显示全部楼层 · 发表于 2007-5-5 23:39:45

Scan performed at: 2007-5-5 23:40:03
Scanning Log
NOD32 version 2243 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\8868.rar
Operating memory - is OK

Date: 5.5.2007 Time: 23:40:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\8868.rar
C:\Documents and Settings\EQ2\桌面\8868.rar ?RAR ?8868.Exe - probably a variant of Win32/Spy.Delf.PG trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:40:08 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-5 23:40:50

PWS-QQPass.dll (特洛伊)

显示全部楼层 · 发表于 2007-5-5 23:41:09

费尔的回答

显示全部楼层 · 发表于 2007-5-5 23:56:21

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-QQPass.dll (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME.\桌面\8868.Exe

显示全部楼层 · 发表于 2007-5-6 00:15:04

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-6 0:14
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 8868.Exe
Path: C:\Documents and Settings\Administrator\桌面\8868
Status: Move file into quarantine
Virus: Trojan-Spy.Win32.Delf.ps (KAV engine), Trojan.Delf.NEB (BD-Engine)
Analysis complete: 2007-5-6 0:14
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-6 00:17:09

显示全部楼层 · 发表于 2007-5-6 00:48:26

显示全部楼层 · 发表于 2007-5-6 02:01:43

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\8868.rar'
C:\Documents and Settings\morgan\My Documents\
  8868.rar
[0] Archive type: RAR
--> 8868.Exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

下载某软件时捆绑的木马

本帖子中包含更多资源

MCAFEE报木马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源