再给周幸 zu.exe [md5:f38fcd]

显示全部楼层 · 发表于 2007-6-26 16:07:51

准备睡觉，临睡觉前来个XX免杀
p.s 制作病毒为了加分，为了加分制作病毒，加分为了制作病毒
panda又卡死了，与我无关呀。。
File: zu.exe
Status:
INFECTED/MALWARE
MD5: f38fcd2db04e37a65199b652b7fb6755
Packers detected:
Analyzing...
Bit9 reports: File not found
Scanner results
Scan taken on 26 Jun 2007 08:02:58 (GMT)
A-Squared
Found nothing
AntiVir
Found TR/Agent.46451
ArcaVir
Found nothing
Avast
Found Win32:Onlinegames-ABF
AVG Antivirus
Found PSW.Generic4.VEO
BitDefender
Found Generic.Malware.SFMBg.AC3FEAD4
ClamAV
Found nothing
Dr.Web
Found BackDoor.Pigeon.1604
F-Prot Antivirus
Found Possibly a new variant of W32/PWStealer1!Generic
F-Secure Anti-Virus
Found Trojan-PSW.Win32.OnLineGames.dz
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Trojan-PSW.Win32.OnLineGames.dz
NOD32
Found nothing
Norman Virus Control
Found W32/Hupigon.gen67
Panda Antivirus
Scanning, please wait...
Rising Antivirus
Scanning, please wait...
VirusBuster
Scanning, please wait...
VBA32
Scanning, please wait...

显示全部楼层 · 发表于 2007-6-26 16:09:16

病毒: Trojan-PSW.Win32.OnLineGames.dz
檔案: zu[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N
處理序: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-26 16:09:35

费尔消灭了，呵呵

显示全部楼层 · 发表于 2007-6-26 17:23:18

木马名称:未知木马

程序:
D:\JINPENG\DOWNLOAD\ZU\ZU.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

微点报未知！！

显示全部楼层 · 发表于 2007-6-26 17:27:33

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\zu.rar:<RAR>\zu.exe : infected Trojan-PSW.Win32.OnLineGames.dz
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 4    - total    : 25
- scanned       : 4    -  scanned : 4    - scanned    : 24
- contain viruses : 1    -  infected : 1    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Startup : 17:32:51 26-06-2007
End       : 17:32:57 26-06-2007
Total time : 00:00:06
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-26 17:29:14

[Scan path] C:\Documents and Settings\Administrator\桌面\zu.rar
>C:\Documents and Settings\Administrator\桌面\zu.rar\zu.exe infected with BackDoor.Pigeon.1604
C:\Documents and Settings\Administrator\桌面\zu.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 46 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-6-26 17:50:57

显示全部楼层 · 发表于 2007-6-26 17:52:24

SYMANTEC MISS

[病毒样本] 再给周幸 zu.exe [md5:f38fcd]

本帖子中包含更多资源

本帖子中包含更多资源