virus

显示全部楼层 · 发表于 2007-5-29 10:11:53

Spyware.genus is found

1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM.2DT
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\NEWINFO.BMP

[ 本帖最后由 Nblock 于 2007-5-29 10:13 编辑 ]

显示全部楼层 · 发表于 2007-5-29 10:12:02

Scan performed at: 2007-5-29 10:11:59
Scanning Log
NOD32 version 2294 (20070528) NT
Command line: C:\Documents and Settings\EQ2\桌面\3.rar
Operating memory - is OK

Date: 29.5.2007 Time: 10:12:03
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\3.rar
C:\Documents and Settings\EQ2\桌面\3.rar ?RAR ?3.exe - a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 10:12:03 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-29 10:15:30

KIS7.0.0.119

已隔离: 病毒 Downloader (变种) 文件: F:\3.rar/3.exe

卡7启发到的~~~~~

显示全部楼层 · 发表于 2007-5-29 10:42:41

Hello,

3.exe_ - Trojan-PSW.Win32.Delf.qc

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 3.zip

显示全部楼层 · 发表于 2007-5-29 10:42:46

3.rar\3.exe;C:\Documents and Settings\Administrator\桌面\3.rar;Trojan.PWS.Gamania.origin;;
3.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-5-29 11:26:32

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.rar'
C:\Documents and Settings\Administrator\桌面\3.rar
  [0] Archive type: RAR
  --> 3.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-29 11:26:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\3.rar'
C:\Documents and Settings\morgan\My Documents\
  3.rar
[0] Archive type: RAR
--> 3.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-29 12:09:50

来张图

显示全部楼层 · 发表于 2007-5-29 12:19:55

Virus: Trojan-PSW.Win32.Delf.qc

Virus found while downloading Web content.

Address: bbs.kafan.cn

[病毒样本] virus

本帖子中包含更多资源

本帖子中包含更多资源