樣本downloader

显示全部楼层 · 发表于 2007-5-6 11:50:03

Scan performed at: 2007-5-6 11:50:14
Scanning Log
NOD32 version 2244 (20070505) NT
Command line: C:\Documents and Settings\EQ2\桌面\test.rar
Operating memory - is OK

Date: 6.5.2007 Time: 11:50:18
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\test.rar
C:\Documents and Settings\EQ2\桌面\test.rar ?RAR ?test.exe - Win32/StartPage.NGT trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 11:50:18 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-6 11:50:35

显示全部楼层 · 发表于 2007-5-6 11:52:13

Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-5-6 11:51:44,TrojanDownloader.Delf.aqt.bqr,木马,BEYOND,C:\Documents and Settings\BEYOND\桌面\test.rar>>test.exe,Manual scan

显示全部楼层 · 发表于 2007-5-6 11:52:35

deleted: Trojan program Trojan-Downloader.Win32.Delf.aqt File: C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\test.rar/test.exe//UPX

显示全部楼层 · 发表于 2007-5-6 11:53:41

Starting the file scan:

Begin scan in 'F:\样本\test.rar'
F:\样本\test.rar
  [0] Archive type: RAR
  --> test.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Graybird.FF73DB34 Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-6 11:54:21

这个是鸽子吗？？？？？？

显示全部楼层 · 发表于 2007-5-6 11:57:46

原帖由 EQ2 于 2007-5-6 11:54 发表
这个是鸽子吗？？？？？？

不是鸽子

nod32说的很明白

显示全部楼层 · 发表于 2007-5-6 11:58:55

StartPage.。。。。。。。。。。。。。。

显示全部楼层 · 发表于 2007-5-6 11:59:16

报下载者还是沾一点边的。。。。但是报鸽子就十分不解ing

[病毒样本] 樣本downloader

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源