飞翔下载里的好东东

显示全部楼层 · 发表于 2007-5-7 14:23:37

强行视频

显示全部楼层 · 发表于 2007-5-7 14:24:20

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\强行打开摄像头的软件.rar'
C:\Documents and Settings\Administrator\桌面\强行打开摄像头的软件.rar
  [0] Archive type: RAR
  --> shiee.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQRob.15
  --> ??DD′ò?aé???í·μ?èí?t\shiee.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQRob.15
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-7 14:24:42

Starting the file scan:

Begin scan in 'F:\样本\强行打开摄像头的软件.rar'
F:\样本\强行打开摄像头的软件.rar
  [0] Archive type: RAR
  --> shiee.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQRob.15
  --> Ç¿ÐÐ´ò¿ªÉãÏñÍ·µÄÈí¼þ\shiee.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQRob.15
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-7 14:28:17

C:\Documents and Settings\moonsilver\桌面\强行打
开摄像头的软件.rar>>shiee.exe

Trojan.Saghost.20

rising

显示全部楼层 · 发表于 2007-5-7 14:29:15

detected: Trojan program Trojan-Dropper.Win32.Delf.c File: C:\Documents and Settings\Owner\×ÀÃæ\Ç¿ÐÐ´ò¿ªÉãÏñÍ·µÄÈí¼þ.rar/shiee.exe//UPX
detected: Trojan program Trojan-Dropper.Win32.Delf.c File: C:\Documents and Settings\Owner\×ÀÃæ\Ç¿ÐÐ´ò¿ªÉãÏñÍ·µÄÈí¼þ.rar/Ç¿ÐÐ´ò¿ªÉãÏñÍ·µÄÈí¼þ\shiee.exe//UPX

显示全部楼层 · 发表于 2007-5-7 15:09:16

avast!

显示全部楼层 · 发表于 2007-5-7 15:21:01

vba
F:\强行打开摄像头的软件.rar:<RAR>\shiee.exe : infected Trojan-Dropper.Win32.Delf.c
F:\强行打开摄像头的软件.rar:<RAR>\强行打开摄像头的软件\shiee.exe : infected Trojan-Dropper.Win32.Delf.c

显示全部楼层 · 发表于 2007-5-7 15:40:54

Scan performed at: 2007-5-7 15:41:09
Scanning Log
NOD32 version 2245 (20070506) NT
Command line: C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar
Operating memory - is OK

Date: 7.5.2007 Time: 15:41:13
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar
C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar ?RAR ?shiee.exe - Win32/TrojanDropper.Delf.C trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\强行打开摄像头的软件.rar ?RAR ?强行打开摄像头的软件\shiee.exe - Win32/TrojanDropper.Delf.C trojan - was a part of the deleted object
Number of scanned files: 7
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 15:41:13 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-7 16:59:19

驱逐舰

显示全部楼层 · 发表于 2007-5-7 18:15:25

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-7 18:14
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: shiee.exe
Path: C:\Documents and Settings\Administrator\桌面\强行打开摄像头的软件
Status: Move file into quarantine
Virus: Trojan-Dropper.Win32.Delf.c (KAV engine), Trojan.Dropper.Delf.C (BD-Engine)
Object: shiee.exe
Path: C:\Documents and Settings\Administrator\桌面\强行打开摄像头的软件\强行打开摄像头的软件
Status: Move file into quarantine
Virus: Trojan-Dropper.Win32.Delf.c (KAV engine), Trojan.Dropper.Delf.C (BD-Engine)
Analysis complete: 2007-5-7 18:14
6 files checked
2 infected files detected
0 suspected files detected

飞翔下载里的好东东

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源