[MD5: F116F5]再来一个

红心王子

这个毒比较pop一点，看看有一个报的？

aerbeisi

The requested URL http://bbs.kafan.cn/attachment.php?aid=83995 is infected with Worm.Win32.Delf.bz virus

tracydk

A-Squared  Found nothing
AntiVir  Found WORM/Delf.BZ.1, TR/Crypt.ULPM.Gen  
ArcaVir  Found Worm.Delf.Bz  
Avast  Found nothing
AVG Antivirus  Found PSW.Generic4.KMS  
BitDefender  Found Trojan.Agent.AABT  
ClamAV  Found Trojan.Spy-6766  
Dr.Web  Found Win32.HLLW.Autoruner  
F-Prot Antivirus  Found W32/PWStealer.JTD, W32/PWStealer2!Generic  
F-Secure Anti-Virus  Found Worm.Win32.Delf.bz  
Fortinet  Found PossibleThreat  
Kaspersky Anti-Virus  Found Worm.Win32.Delf.bz  
NOD32  Found Win32/Pacex.Gen  
Norman Virus Control  Found nothing
Panda Antivirus  Found Trj/QQPass.ACV  
Rising Antivirus  Found Trojan.DL.Mnless.agb  
VirusBuster  Found Trojan.Onlinegames.Gen!Pac.30  
VBA32  Found Worm.Win32.Delf.bz

ivan_t

呵呵,MCAFEE半路拦截.

dyw1021

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\01.rar'
C:\Documents and Settings\Administrator\桌面\01.rar
  [0] Archive type: RAR
  --> romdrivers.dll
      [DETECTION] Contains signature of the worm WORM/Delf.BZ.1
  --> romdrivers.bak
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was moved to '4696daa5.qua'!

foxhound

AVG Anti-Spyware 7.5

+ 创建时间:        12:29:16 2007-6-8

+ 扫描结果:        



F:\01.rar/romdrivers.bak -> Worm.Delf.bz : 已清除.
F:\01.rar/romdrivers.dll -> Worm.Delf.bz : 已清除.


::报告结束

小邪邪

咖啡杀

鼻耳盖子

另外一个是dll文件

蠕虫名称:Worm.Win32.Delf.apf
程序:
I:\TEST\070608\5\01\ROMDRIVERS.BAK
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

jlennon

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-6-7, 20:26

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\01.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-6-8, 17:18:26
---------------------------------------------------------------------

[Found password stealer]         <W32/PWStealer.JTD (exact, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\01.rar->romdrivers.dll
[Found worm]         <W32/Worm!e3de (exact, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\01.rar->romdrivers.bak
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\01.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\01.rar->romdrivers.bak

---------------------------------------------------------------------
Scan ended:        2007-6-8, 17:18:28
Duration:        0:00:02

Scan result:

Scanned files:                 1
Infected objects:         2
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

tracydk