报的不多[MD5: 8068C5]

zane_xzz

报的不多[MD5: 8068C5]

tracydk

红伞不报

xxwpk007

nod pass

xiaopangmd

NOD,大蜘蛛，AVG不报

tracydk

上报AVIRA看下

xxwpk007

进程：
   路径： C:\Documents and Settings\Administrator\桌面\my-post-card.exe
   PID: 1968
   信息：  (Chan)
注册表群组： Machine AutoRun
对象：
   注册表键： HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   注册表值： win1ogin
      类型: REG_SZ
      值： C:\WINDOWS\svchost.exe

父级进程：
   路径： C:\Documents and Settings\Administrator\桌面\my-post-card.exe
   PID: 1968
   信息：  (Chan)
子级进程：
   路径： C:\WINDOWS\svchost.exe
   信息：  (Chan)
   命令行：C:\WINDOWS\svchost.exe

tracydk

AhnLab-V3	2007.7.14.0	2007.07.16	no virus found
AntiVir	7.4.0.42	2007.07.16	no virus found
Authentium	4.93.8	2007.07.17	Possibly a new variant of W32/VB-Backdoor-EWNF-based!Maximus
Avast	4.7.997.0	2007.07.16	no virus found
AVG	7.5.0.476	2007.07.16	no virus found
BitDefender	7.2	2007.07.17	no virus found
CAT-QuickHeal	9.00	2007.07.16	no virus found
ClamAV	devel-20070416	2007.07.17	no virus found
DrWeb	4.33	2007.07.16	no virus found
eSafe	7.0.15.0	2007.07.16	no virus found
eTrust-Vet	30.8.3788	2007.07.16	no virus found
Ewido	4.0	2007.07.16	no virus found
FileAdvisor	1	2007.07.17	no virus found
Fortinet	2.91.0.0	2007.07.17	no virus found
F-Prot	4.3.2.48	2007.07.17	W32/VB-Backdoor-EWNF-based!Maximus
Ikarus	T3.1.1.8	2007.07.17	no virus found
Kaspersky	4.0.2.24	2007.07.17	no virus found
McAfee	5075	2007.07.16	Generic AdClicker.a
Microsoft	1.2704	2007.07.17	no virus found
NOD32v2	2401	2007.07.17	no virus found
Norman	5.80.02	2007.07.16	no virus found
Panda	9.0.0.4	2007.07.16	no virus found
Sophos	4.19.0	2007.07.16	Mal/VB-G
Sunbelt	2.2.907.0	2007.07.16	no virus found
Symantec	10	2007.07.17	Trojan.Adclicker
TheHacker	6.1.7.148	2007.07.16	no virus found
VBA32	3.12.2	2007.07.16	no virus found
VirusBuster	4.3.23:9	2007.07.16	no virus found
Webwasher-Gateway	6.0.1	2007.07.17	no virus found

xxwpk007

woai_jolin

my-post-card.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS

[ General information ]
    * Applications uses MSVBVM60.DLL (Visual Basic 6).
    * Form uses id Timer.
    * Form uses id Form.
    * File length:       507904 bytes.
    * MD5 hash: 8068c5944ad9ef3a7c8baf70db2bf247.

[ Process/window information ]
    * Creates a COM object with CLSID
{FCFB3D23-A0FA-1068-A738-08002B3371B5} : VBRuntime.
    * Creates a COM object with CLSID
{E93AD7C1-C347-11D1-A3E2-00A0C90AEA82} : VBRuntime6.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information
source only.

This file is not flagged as malicious by the Norman Sandbox Information
Center. However, we can not guarantee that the file is harmless. If
you still suspect the file to be malicious and if you urgently need to
know for sure, please submit it to your local Norman support department
for manual analysis.

红心王子

上报。。