应该是下载者

显示全部楼层 · 发表于 2007-5-31 03:44:38

不过只下载出了一个窗口
看不出有什么危害
201.7.184.2 链接一个巴西得ip地址

显示全部楼层 · 发表于 2007-5-31 03:53:36

Kaspersky Anti-Virus 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=78705 is infected with Trojan-Downloader.Win32.Banload.cfi virus

显示全部楼层 · 发表于 2007-5-31 03:59:03

Scan performed at: 2007-5-31 3:58:47
Scanning Log
NOD32 version 2299 (20070530) NT
Command line: C:\Documents and Settings\EQ2\桌面\AGEM.rar
Operating memory - is OK

Date: 31.5.2007 Time: 03:58:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\AGEM.rar
C:\Documents and Settings\EQ2\桌面\AGEM.rar ?RAR ?AGEM.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:58:56 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-5-31 04:23:21

怎么我等了那么久他还没下东西回来

显示全部楼层 · 发表于 2007-5-31 05:55:24

Virus: Trojan-Downloader.Win32.Banload.cfi

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-5-31 06:23:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\AGEM.rar'
C:\Documents and Settings\morgan\My Documents\
  AGEM.rar
[0] Archive type: RAR
--> AGEM.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.cfi.1
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-31 07:59:00

原帖由 aoyang 于 2007-5-31 04:23 发表
怎么我等了那么久他还没下东西回来

我也在等
只连出不连进

显示全部楼层 · 发表于 2007-5-31 08:02:35

卡巴斯基反病毒6.0个人版
The requested URL http://bbs.kafan.cn/attachment.php?aid=78705 is infected with Trojan-Downloader.Win32.Banload.cfi virus

看来已经被人上报了？

显示全部楼层 · 发表于 2007-5-31 08:17:34

原帖由 remind_me 于 2007-5-31 08:02 发表
卡巴斯基反病毒6.0个人版
The requested URL http://bbs.kafan.cn/attachment.php?aid=78705 is infected with Trojan-Downloader.Win32.Banload.cfi virus

看来已经被人上报了？

virustotal可以自动将扫描的文件传送到各大杀软厂商

显示全部楼层 · 发表于 2007-5-31 08:24:22

原帖由 lanvin 于 2007-5-31 08:17 发表

virustotal可以自动将扫描的文件传送到各大杀软厂商

了解了

[病毒样本] 应该是下载者

本帖子中包含更多资源