1065E4

显示全部楼层 · 发表于 2007-6-22 00:09:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> A.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.28111.1
   [INFO]    The file was moved to '46a90ad3.qua'!

End of the scan: 2007年6月22日  00:13
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-6-22 00:10:36

detected: virus Downloader (modification) URL: http://bbs.kafan.cn/attachment.php?aid=90861//A.exe

显示全部楼层 · 发表于 2007-6-22 00:11:19

是下载者

显示全部楼层 · 发表于 2007-6-22 00:11:26

显示全部楼层 · 发表于 2007-6-22 00:48:53

病毒: Win32:Delf-EWR [Trj]
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VM1NGYS8
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-22 01:05:03

扫描开始时间: 2007-6-22 1:10:33
扫描日志
NOD32 版本 2342 (20070621) NT
命令行: F:\virus\样本7.rar

日期: 2007年6月22日时间: 01:10:34
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\样本7.rar
F:\virus\样本7.rar ?RAR ?A.exe<病毒 - Win32/PSW.Delf.NHI 木马变种>
已扫描文件数量: 1
已发现病毒数量: 1
完成时间: 01:10:34 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-6-22 06:40:36

Virus: Trojan-PSW.Win32.Delf.qc

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-22 07:24:41

显示全部楼层 · 发表于 2007-6-22 08:12:51

斧头KV监控干掉

[病毒样本] 1065E4

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源