MD5: 8AD7DD 5555.exe

显示全部楼层 · 发表于 2007-6-6 14:55:31

5555.exe - 可能是 Win32/TrojanDownloader.Delf.BHO 木马的一个变种

显示全部楼层 · 发表于 2007-6-6 15:02:56

卡吧7启发报

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=82887 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-6-6 15:05:36

显示全部楼层 · 发表于 2007-6-6 15:07:38

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-6
Start time: 2007-6-6 15:08
Engine(s): KAV engine (AVK 17.5733), BD-Engine (BD 17.5315)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 5555.exe
Path: C:\Documents and Settings\Administrator\桌面\5555
Status: Move file into quarantine
Virus: GenPack:Generic.Malware.WBdld.DFAE9DFA (BD-Engine)
Analysis complete: 2007-6-6 15:08
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-6 15:09:37

system32下创建文件，安装服务，最后deleteme

显示全部楼层 · 发表于 2007-6-6 15:15:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\5555.rar'
C:\Documents and Settings\Administrator\My Documents\
  5555.rar
[0] Archive type: RAR
--> 5555.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-6 15:16:43

微点是先砍了，不管后续动作了

显示全部楼层 · 发表于 2007-6-6 15:33:12

AVG AntiSpyware
Worm.Delf.bs Risk high

我的小红伞就更不用说了。

[ 本帖最后由 randyr 于 2007-6-6 15:34 编辑 ]

显示全部楼层 · 发表于 2007-6-6 15:49:42

AVAST不报

[病毒样本] MD5: 8AD7DD 5555.exe

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源