MD5: E068B1 ~Temp6436.tmp

显示全部楼层 · 发表于 2007-6-7 02:56:57

autorun

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\~Temp6436.rar'
C:\Documents and Settings\Administrator\My Documents\
  ~Temp6436.rar
[0] Archive type: RAR
--> ~Temp6436.tmp
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-7 03:30:28

A-Squared	Found nothing
AntiVir	Found DR/Delphi.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan-PSW.Lmir.83 (paranoid heuristics) (probable variant)

扫描快结束的时候我还以为红伞独家报道~~ 最后VBA还启发了个

显示全部楼层 · 发表于 2007-6-7 06:08:25

很可能有误，上报！

显示全部楼层 · 发表于 2007-6-7 07:19:03

AVAST不报

显示全部楼层 · 发表于 2007-6-7 08:04:23

detected: virus Virus.Win32.AutoRun.bk File: C:\Documents and Settings\Owner\×ÀÃæ\~Temp6436.rar/~Temp6436.tmp//UPX

显示全部楼层 · 发表于 2007-6-7 08:10:30

这次改的比较狠，nod都认不出来了。

显示全部楼层 · 发表于 2007-6-7 10:55:37

显示全部楼层 · 发表于 2007-6-7 12:01:56

继续上报。。。

胸闷。。

显示全部楼层 · 发表于 2007-6-7 12:04:57

杀软都有自己的软肋，没办法。

[病毒样本] MD5: E068B1 ~Temp6436.tmp

本帖子中包含更多资源

评分

本帖子中包含更多资源