HEUR/Malware F06EB8BC

显示全部楼层 · 发表于 2007-6-23 22:11:10

bind_50237.exe
[DETECTION] Contains suspicious code HEUR/Malware

显示全部楼层 · 发表于 2007-6-23 22:13:29

Scan performed at: 2007-6-23 22:18:13
Scanning Log
NOD32 version 2348 (20070623) NT
Command line: C:\Documents and Settings\EQ2\桌面\bind_50237.zip
Operating memory - is OK

Date: 23.6.2007 Time: 22:18:17
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\bind_50237.zip
C:\Documents and Settings\EQ2\桌面\bind_50237.zip ?ZIP ?bind_50237.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 22:18:17 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-6-23 22:13:44

红伞不报

显示全部楼层 · 发表于 2007-6-23 22:13:47

显示全部楼层 · 发表于 2007-6-23 22:14:32

只有连网动作。。应该是下载者了。。。BD这个BT 。。

Check system areas...
Check selected directories and files...
Object: bind_50237.exe
      Path: C:\Documents and Settings\Administrator\桌面\bind_50237
      Status: Suspected virus
      Virus: BehavesLike:Trojan.Downloader (BD-Engine)
Analysis complete: 2007-6-23 22:18
1 files checked
0 infected files detected
1 suspected files detected

[ 本帖最后由蓝色牛仔裤于 2007-6-23 22:18 编辑 ]

显示全部楼层 · 发表于 2007-6-23 22:15:23

nod32的动态启发。。。。。。BD的行为启发

显示全部楼层 · 发表于 2007-6-23 22:20:55

所谓的行为

显示全部楼层 · 发表于 2007-6-23 22:20:58

卡巴的主动防御

显示全部楼层 · 发表于 2007-6-23 22:21:52

sophos。。。。。。

显示全部楼层 · 发表于 2007-6-23 22:24:46

suspicious driver install

deleted: adware not-a-virus:AdWare.Win32.WSearch.g File: D:\Temp\lau6.tmp//ASPack
detected: riskware Invader Running process: C:\Program Files\CNNIC\Cdn\cdnup.exe
deleted: adware not-a-virus:AdWare.Win32.WSearch.g File: D:\Temp\okw7.tmp//ASPack
detected: Trojan program Trojan-Dropper.Win32.Agent.ayy URL: http://setup4.tqzn.com/barbindsoft/barsetup.exe?queryid=50237

[病毒样本] HEUR/Malware F06EB8BC

本帖子中包含更多资源

BD真牛(AVK)

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源