未知

qqq000@qq.com

未知未知

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\δ֪'
C:\Documents and Settings\morgan\My Documents\δ֪\未知\
  03.exe
      [DETECTION] Contains signature of the dropper DR/BHO.AV.146
      [INFO]      The file was deleted!
  825.exe
  acpidisk.sys
      [DETECTION] Contains signature of the rootkit RKIT/Cinmus.M
      [INFO]      The file was deleted!
  bind_50202[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46ae04f9.qua'!
  DoSSSetup.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cinmus.JH
      [INFO]      The file was deleted!
  InstallOptions.dll
  System.dll
  [12]setup[trd.elf.tt].exe
  [1]setup[trd.elf.tt].exe
      [DETECTION] Is the Trojan horse TR/Delf.TT
      [INFO]      The file was deleted!
  [2]setup[trd.elf.tt].exe
      [DETECTION] Contains signature of the dropper DR/BHO.AV.176
      [INFO]      The file was deleted!
  [4]setup[trd.elf.tt].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  [4]setup[trd.elf.tt]_unpacked.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  [5]setup[trd.elf.tt].exe
  [6]setup[trd.elf.tt].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [INFO]      The file was deleted!
  [7]setup[trd.elf.tt].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '469d04cb.qua'!
  [8]setup[trd.elf.tt].exe


End of the scan: 2007年5月7日  22:03
Used time: 00:12 min

The scan has been done completely.

      2 Scanning directories
     16 Files were scanned
     10 viruses and/or unwanted programs were found
      2 classified as suspicious:
      8 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

The EQs

nod32成绩不好。。。上报ing

风野胤

原帖由 EQ2 于 2007-5-8 13:06 发表
nod32成绩不好。。。上报ing

我是把能解压出来的东西直接打包上报
让eset分析去吧

The EQs

LS的PM偶你的邮箱地址。。。下回发送病毒的时候顺便给你发送一份

wangjay1980

deleted: adware not-a-virus:AdWare.Win32.AdMoke.dv        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[4]setup[trd.elf.tt]_unpacked.exe
detected: Trojan program Trojan-Dropper.Win32.Delf.or        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[1]setup[trd.elf.tt].exe//ASPack
deleted: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[2]setup[trd.elf.tt].exe//data0002
deleted: adware not-a-virus:AdWare.Win32.BHO.av        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[2]setup[trd.elf.tt].exe//data0003//stream//data0001
deleted: adware not-a-virus:AdWare.Win32.AdMoke.dv        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[4]setup[trd.elf.tt].exe//ASPack
deleted: adware not-a-virus:AdWare.Win32.WSearch.o        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\6444.TMP//stream//data0001
deleted: adware not-a-virus:AdWare.Win32.Dm.s        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\6444.TMP//stream//data0003
deleted: Trojan program Trojan-Downloader.Win32.Adload.bz        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\6444.TMP//stream//data0004
detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[7]setup[trd.elf.tt].exe
deleted: adware not-a-virus:AdWare.Win32.Boran.z        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\[8]setup[trd.elf.tt].exe//stream//data0001
deleted: adware not-a-virus:AdWare.Win32.BHO.av        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\03.exe
detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\δ֪\bind_50202[1].exe
deleted: adware not-a-virus:AdWare.Win32.WSearch.o        File: c:\documents and settings\owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\2B3.TMP//stream//data0001
deleted: adware not-a-virus:AdWare.Win32.Dm.s        File: c:\documents and settings\owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\2B3.TMP//stream//data0003
deleted: Trojan program Trojan-Downloader.Win32.Adload.bz        File: c:\documents and settings\owner\×ÀÃæ\δ֪\[6]setup[trd.elf.tt].exe//PE_Patch//UPack\2B3.TMP//stream//data0004

欠妳緈諨

8个

kp2006

金山在线报1个

恶毒者

kp2006

瑞星

C:\未知[1]\未知\[1]setup[trd.elf.tt].exe>>Aspack2
12r

Dropper.Delf.bwd

C:\未知[1]\未知\[2]setup[trd.elf.tt].exe>>$SYSDIR
\dr32.exe

Trojan.DL.Delf.ymb

tonger2003

jiang min