U盘病毒一个[MD5: C67E46]

显示全部楼层 · 发表于 2007-6-16 19:54:30

比较流行之一，文件名叫setup.exe的

显示全部楼层 · 发表于 2007-6-16 19:58:53

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 10.00.600
病毒库日期 2007-06-16
更新日期 2007-06-16

扫描目标 C:\Documents and Settings\Administrator\桌面\virus2.rar

开始时间 2007-06-16 20:01:30

在 C:\Documents and Settings\Administrator\桌面\virus2.rar->setup.exe 中发现 Trojan/PSW.GamePass.nzp 病毒, 已删除
正常结束。

扫描结果:
               文件数 :685                               病毒体 :1
               删除 :1                                  解毒 :0
扫描速度(千字节/秒) :5167                            扫描时间 :00:00:39
扫描文件速度(个/秒) :17

== == ==       == == == == == == == == == == == == == == == == == == == == == == ==    == == == == == ==

显示全部楼层 · 发表于 2007-6-16 19:59:14

咖啡报杀木马

显示全部楼层 · 发表于 2007-6-16 20:11:35

真的很喜欢楼主的头像，看上去特别悠闲。。好向往啊。。。

[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>C:\Documents and Settings\Administrator\桌面\virus.rar\setup.exe infected with Win32.HLLW.Dao
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 20 Kb/s
Scan time: 00:00:01

显示全部楼层 · 发表于 2007-6-16 20:23:39

detected: virus Virus.Win32.Delf.bz URL: http://bbs.kafan.cn/attachment.php?aid=88193//setup.exe//UPack

显示全部楼层 · 发表于 2007-6-16 20:41:03

病毒: Virus.Win32.Delf.bz
文件: virus[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\LBHOXL0R
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-16 20:57:03

好像见过
可是NOD32好像还是挂了

?          Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution
*:
C:\
C:\ABC\...\setup.exe : is suspected of Trojan-Spy.Delf.13 (paranoid heuristics)
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 26
- scanned       : 1    -  scanned : 1    - scanned    : 26
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1
Startup : 21:02:06 16-06-2007
End       : 21:02:09 16-06-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

[ 本帖最后由 promised 于 2007-6-16 20:58 编辑 ]

显示全部楼层 · 发表于 2007-6-16 21:01:38

virus.rar
  [0] Archive type: RAR
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.bka.1

显示全部楼层 · 发表于 2007-6-16 21:10:46

补张图

显示全部楼层 · 发表于 2007-6-16 22:09:57

Virus: Virus.Win32.Delf.bz

Virus found while downloading Web content.

Address: bbs.kafan.cn

[病毒样本] U盘病毒一个[MD5: C67E46]

本帖子中包含更多资源

本帖子中包含更多资源