网马 #3

显示全部楼层 · 发表于 2007-5-27 10:48:20

ESS总算查出了东西

显示全部楼层 · 发表于 2007-5-27 10:49:25

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=76537 is infected with Trojan-Clicker.Win32.Delf.fj virus

显示全部楼层 · 发表于 2007-5-27 10:50:28

这个KV总算是报了
砍掉了

显示全部楼层 · 发表于 2007-5-27 10:58:36

Starting the file scan:

Begin scan in 'F:\样本\go.zip'
F:\样本\go.zip
  [0] Archive type: ZIP
  --> go.exe
   [DETECTION] Is the Trojan horse TR/Click.Delf.FJ.7
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-27 11:54:10

C:\Documents and Settings\moonsilver\桌面\go.zip>
>go.exe

Trojan.Clicker.Delf.th

rising

显示全部楼层 · 发表于 2007-5-27 12:34:14

NOD32最近表现够烂

显示全部楼层 · 发表于 2007-5-27 12:55:48

Dr.Web
go.exe;C:\Documents and Settings\Mahaijun\桌面\go;Trojan.PWS.Banker.6747;;

显示全部楼层 · 发表于 2007-5-27 12:56:25

?          Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\go.zip:<ZIP>\go.exe : infected Trojan-Clicker.Win32.Delf.fj
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 8
- scanned       : 1    -  scanned : 1    - scanned    : 7
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 12:56:16 27-05-2007
End       : 12:56:19 27-05-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-5-28 17:21:58

显示全部楼层 · 发表于 2007-5-29 00:43:41

咖啡报了

2007-5-29 0:44:33 未采取操作 C:\Documents and Settings\Administrator\桌面\go.zip\GO.EXE Generic.dx(特洛伊)

[病毒样本] 网马 #3

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

微点报未知木马

本帖子中包含更多资源