一个经常更新的东西[MD5: FA4231]

风野胤

有空可以去hxxp://www.boadongo.org/9755.exe看看
用迅雷下的
又更新了

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.30.0	06.29.2007 [td]no virus found
AntiVir	7.4.0.37	06.29.2007	HEUR/Malware
Authentium	4.93.8	06.29.2007 [td]no virus found
Avast	4.7.997.0	07.01.2007 [td]no virus found
AVG	7.5.0.476	06.30.2007 [td]no virus found
BitDefender	7.2	07.01.2007 [td]no virus found
CAT-QuickHeal	9.00	06.30.2007 [td]no virus found
ClamAV	devel-20070416	06.30.2007 [td]no virus found
DrWeb	4.33	06.30.2007	Trojan.DownLoader.7059
eSafe	7.0.15.0	06.30.2007	Suspicious Trojan/Worm
eTrust-Vet	30.8.3752	06.29.2007 [td]no virus found
Ewido	4.0	06.30.2007 [td]no virus found
FileAdvisor	1	07.01.2007 [td]no virus found
Fortinet	2.91.0.0	06.30.2007 [td]no virus found
F-Prot	4.3.2.48	06.29.2007 [td]no virus found
F-Secure	6.70.13030.0	06.29.2007 [td]no virus found
Ikarus	T3.1.1.8	06.30.2007 [td]no virus found
Kaspersky	4.0.2.24	07.01.2007 [td]no virus found
McAfee	5064	06.29.2007 [td]no virus found
Microsoft	1.2701	06.30.2007 [td]no virus found
NOD32v2	2366	07.01.2007 [td]no virus found
Norman	5.80.02	06.29.2007	W32/VBTroj.GVO
Panda	9.0.0.4	06.30.2007 [td]no virus found
Sophos	4.19.0	06.28.2007 [td]no virus found
Sunbelt	2.2.907.0	06.29.2007 [td]no virus found
Symantec	10	07.01.2007 [td]no virus found
TheHacker	6.1.6.140	06.28.2007 [td]no virus found
VBA32	3.12.0.2	06.30.2007	suspected of Trojan-Dropper.Agent.66

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\9755.zip'
C:\Documents and Settings\Administrator\My Documents\
  9755.zip
    [0] Archive type: ZIP
    --> 9755.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

woai_jolin

上报

lovewei

是个卡巴主动防御杀手

solcroft

也没什么了不起的东西
生成一个修改系统时间的批处理，两个死尸，还有一个被ESS干掉的病毒
这种水准也自称卡巴主动防御杀手...

红心王子

狮子不报
上报

wangjay1980

2007-7-1 JAY10:01:42        C:\WINDOWS\System32\cmd.exe        Attempt to run critical application.
2007-7-1 JAY10:01:42        C:\WINDOWS\System32\cmd.exe        Action blocked.
2007-7-1 JAY10:01:52        C:\Documents and Settings\Owner\×ÀÃæ\9755.exe        Program module C:\WINDOWS\Temp\~TMP1.EXE installed and running without user interaction. This activity is similar to Trojan Downloader/Dropper.
2007-7-1 JAY10:01:52        C:\Documents and Settings\Owner\×ÀÃæ\9755.exe        Action blocked.
2007-7-1 JAY10:01:57        C:\Documents and Settings\Owner\×ÀÃæ\9755.exe        Program module C:\WINDOWS\Temp\~TMP2.EXE installed and running without user interaction. This activity is similar to Trojan Downloader/Dropper.
2007-7-1 JAY10:01:57        C:\Documents and Settings\Owner\×ÀÃæ\9755.exe        Action blocked.
2007-7-1 JAY10:02:01        C:\WINDOWS\System32\cmd.exe        Attempt to run critical application.
2007-7-1 JAY10:02:01        C:\WINDOWS\System32\cmd.exe        Action blocked.

shmily512099

微点报警  忘了截图。。。

promised

?         Copyright (c) 1993-2007 by VBA Ltd.           ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\9755.zip:<ZIP>\9755.exe : is suspected of Trojan-Dropper.Agent.66
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 1       - total       : 14
- scanned         : 1       -  scanned    : 1       - scanned     : 13
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 1       - suspicious  : 1

Startup    : 11:19:54 01-07-2007
End        : 11:19:58 01-07-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

wangjay1980

detected: Trojan program Trojan-Dropper.Win32.VB.py        URL: http://bbs.kafan.cn/attachment.php?aid=95045/9755.exe