君临天下那里捉的[MD5: B2CEFD 1CDBCB 34EF8E]

显示全部楼层 · 发表于 2007-6-6 12:33:37

那个<script src=http://www.163tc.com/pop.js></script>还真是过分了，里面调用的网页有几个都是有毒的，什么弹出联盟，我K

有些病毒的链接实效了，捉到了三个exe

显示全部楼层 · 发表于 2007-6-6 12:35:56

已删除: 病毒 Downloader (变种) 文件: C:\Documents and Settings\Administrator\桌面\样本.rar/23.exe
已删除: 木马程序 Trojan-Downloader.Win32.Delf.bko 文件: C:\Documents and Settings\Administrator\桌面\样本.rar/down.exe
卡巴7杀

显示全部楼层 · 发表于 2007-6-6 12:38:16

AVK通杀了

显示全部楼层 · 发表于 2007-6-6 12:38:55

上次刚重装了系统用IE上xunchi.com时也中马了
卡巴报了但是杀不净

显示全部楼层 · 发表于 2007-6-6 12:41:05

firefox上去貌似都没事，因为一个都没杀到

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> 289f2030c5d3236c.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> 23.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> down.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-6 12:50:13

NOD32全灭

显示全部楼层 · 发表于 2007-6-6 12:56:15

显示全部楼层 · 发表于 2007-6-6 12:56:30

Virus: Win32:Agent-HFX [Trj], Win32:Delf-EPC [Wrm]

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-6 19:22:41

ess全杀

2007/6/6 19:21:34 Scanning Log
2007/6/6 19:21:34 Version of virus signature database: 2312 (20070606)
2007/6/6 19:21:34 Date: 6.6.2007 Time: 19:21:34
2007/6/6 19:21:34 Scanned disks, folders and files: E:\
2007/6/6 19:21:39 E:\病毒测试\样本.rar - multiple threats - deleted - quarantined
2007/6/6 19:21:39 E:\病毒测试\样本.rar » RAR » 289f2030c5d3236c.exe - a variant of Win32/Agent.NEO trojan
2007/6/6 19:21:39 E:\病毒测试\样本.rar » RAR » 23.exe - a variant of Win32/PSW.Delf.NHI trojan
2007/6/6 19:21:39 E:\病毒测试\样本.rar » RAR » down.exe - Win32/TrojanDownloader.Delf.BHO trojan
2007/6/6 19:21:39 Number of scanned files: 19
2007/6/6 19:21:39 Number of threats found: 3
2007/6/6 19:21:39 Time of completion: 19:21:39 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2007-6-7 15:39:21

木马名称:Trojan-Downloader.Win32.Delf.ftq
程序:
I:\TEST\070606\12\样本\DOWN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 君临天下那里捉的[MD5: B2CEFD 1CDBCB 34EF8E]

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

微点拦截情况

本帖子中包含更多资源

浏览过的版块