virus

显示全部楼层 · 发表于 2007-5-31 22:36:44

Scan performed at: 2007-5-31 22:36:50
Scanning Log
NOD32 version 2301 (20070531) NT
Command line: C:\Documents and Settings\EQ2\桌面\avp.rar
Operating memory - is OK

Date: 31.5.2007 Time: 22:36:54
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\avp.rar
C:\Documents and Settings\EQ2\桌面\avp.rar ?RAR ?avp.exe - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 22:36:54 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-31 22:37:17

这个有点含量
detected: virus Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\avp.rar/avp.exe

显示全部楼层 · 发表于 2007-5-31 22:39:39

avp.exe - 可能是 Win32/PSW.Delf.NHI 木马的一个变种

显示全部楼层 · 发表于 2007-5-31 22:40:05

这个一直没更新

现在好象更新了

卡巴启发报了~~

显示全部楼层 · 发表于 2007-5-31 22:40:44

Begin scan in 'D:\Documents and Settings\dell\桌面\avp.rar'
D:\Documents and Settings\dell\桌面\
D:\Documents and Settings\dell\桌面\avp.rar
  [0] Archive type: RAR
  --> avp.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.126
   [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-31 22:52:12

Hello,

avp.exek - Trojan-PSW.Win32.Nilage.akh

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: avp.zip

显示全部楼层 · 发表于 2007-5-31 23:11:38

显示全部楼层 · 发表于 2007-5-31 23:23:37

tart of the scan: 2007年5月31日  23:23

Starting the file scan:

Begin scan in 'E:\avp.rar'
E:\avp.rar
  [0] Archive type: RAR
  --> avp.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.126
   [INFO]    A backup was created as '46cee8e7.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年5月31日  23:23
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-6-1 00:47:53

[Scan path] C:\Documents and Settings\Administrator\桌面\avp.rar
>>C:\Documents and Settings\Administrator\桌面\avp.rar\avp.exe infected with Trojan.DownLoader.origin
C:\Documents and Settings\Administrator\桌面\avp.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 27 Kb/s
Scan time: 00:00:00

[病毒样本] virus

本帖子中包含更多资源

本帖子中包含更多资源