下载者更新MD5: 5C8A319DD

moonsilver

RT

lsyer

--> 123.exe
      [DETECTION] Is the Trojan horse TR/Click.Agen.7168
      [WARNING]   The file was ignored!

红心王子

。。

Scan taken on 26 Jul 2007 05:50:41 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Click.Agen.7168
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Generic.PWStealer.8CEFA9D2
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Heuri-E
VirusBuster	Found nothing
VBA32	Found Backdoor.Hupigon.5 (paranoid heuristics) (probable variant)

1688388728

已删除: 木马程序 Trojan-PSW.Win32.Delf.wq        文件: C:\Documents and Settings\Administrator\Application Data\Sandbox\DefaultBox\user\current\Local Settings\Temp\123.dll


2007-7-26 13:51:18 C:\病毒库\123\123.exe HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Explorer\SHELLExecuteHOOKs {389D51CA-DBAE-4C24-AF3B-CB9E2817195A}  以00结尾的 Unicode 字符串 创建 探测到
2007-7-26 13:51:18 C:\病毒库\123\123.exe HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Explorer\SHELLExecuteHOOKs {389D51CA-DBAE-4C24-AF3B-CB9E2817195A}  以00结尾的 Unicode 字符串 创建 被阻止

[ 本帖最后由 1688388728 于 2007-7-26 13:56 编辑 ]

微点卫士

金山报一个
费尔挂!

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.859\123.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\123.DLL
是否删除木马程序及其衍生物?

promised

C:\ABC\123.rar:\123.exe - 可疑代码段 被发现 (Level: 170)
C:\ABC\123.rar

The EQs

生成了一个123.dll。。。。

红心王子

5楼的用费尔，把检测未知壳勾上，扫扫这个看报不报

287669789

kav3.5 报木马

微点卫士

原帖由 红心王子 于 2007-7-26 14:01 发表
5楼的用费尔，把检测未知壳勾上，扫扫这个看报不报

钩上了,现在测试了下,费尔还是挂!