一个

显示全部楼层 · 发表于 2007-6-2 18:07:22

鸽子

显示全部楼层 · 发表于 2007-6-2 18:07:59

[Scan path] C:\Documents and Settings\Administrator\桌面\wg.rar
>C:\Documents and Settings\Administrator\桌面\wg.rar\wg.exe infected with Trojan.MulDrop.6158
C:\Documents and Settings\Administrator\桌面\wg.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 61 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-6-2 18:14:01

wg.exe - Win32/TrojanDownloader.Delf.BHO 木马的变种
没有这么小的鸽子

显示全部楼层 · 发表于 2007-6-2 18:29:32

Virus: Win32:Hupigon-BBU [Trj] (2x)

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-2 18:31:09

卡7启发。。

显示全部楼层 · 发表于 2007-6-2 18:31:42

原帖由 taihuxian 于 2007-6-2 18:29 发表
Virus: Win32:Hupigon-BBU (2x)

Virus found while downloading Web content.

Address: bbs.kafan.cn

AVAST这个神经刀乱报鸽子

显示全部楼层 · 发表于 2007-6-2 18:54:33

逃出卡巴扫描，没逃出主动防御！

启发报的是生成物xz.exe为Trojan.generic

显示全部楼层 · 发表于 2007-6-2 19:16:32

八成不是鸽子
?          Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\wg.rar:<RAR>\wg.exe : infected Trojan.MulDrop.6158
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 24
- scanned       : 1    -  scanned : 1    - scanned    : 24
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 19:16:45 02-06-2007
End       : 19:16:49 02-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-2 19:25:56

文件 C:\Documents and Settings\Administrator\桌面\wg.rar 受到 Win32/TrojanDownloader.Delf.BHO 木马的变种感染. 可以删除文件.强烈建议您在删除前备份所有重要数据.
NOD32报警

[病毒样本] 一个

本帖子中包含更多资源

本帖子中包含更多资源