spr.exe[md5:81d488]

mofunzone

vba32...
File:           spr.exe
Status:        
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5:         81d488ce3039ae178197c273f85451d6
Packers detected:        
PE_PATCH.UPX
Bit9 reports:         File not found
Scanner results
Scan taken on 23 Jun 2007 18:15:23 (GMT)
A-Squared        
Found nothing
AntiVir        
Found nothing
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found nothing
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found nothing
NOD32        
Found nothing
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found Worm.Win32.Autoit.T

1688388728

avk2007沉睡

Whkroran

上报看看

Whkroran

卡巴再一点加强启发的话马上报未知病毒

taihuxian

也许不是病毒，vba是个误报王

wangjay1980

detected: Trojan program Trojan.Win32.Autoit.am        URL: http://bbs.kafan.cn/attachment.php?aid=92048//spr.exe

a256886572008

運行spr.exe，發現下列行為，被EQ-Secure RC2攔截！

2007-06-24 09:01:42    运行应用程序      操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\spr\spr.exe
规则:应用程序规则->系統程序->%windir%\Explorer.EXE


2007-06-24 09:01:42    创建文件      操作:阻止
进程路径:D:\桌面\virus\spr\spr.exe
文件路径:C:\windows\windebug.log
规则:所有程序规则->2.1.3组：保護部分重要的文件和文件夾->%SystemDrive%\*

1.他會在C:\windows\生成
   windebug.log

wj730327

一派胡言

kv2007不报。