[MD5: 9AC902 9BD9E5 21D4E0]dllx3

qianwenxiang

三个keylogger
avast飘过..

promised

C:\ABC\Logger_(3)\Logger (1).dll - 特征码 'not-a-virus:Monitor.Win32.Perflogger.ca' 被发现
C:\ABC\Logger_(3)\Logger (2).dll - 特征码 'Trojan.Peflog.30' 被发现
C:\ABC\Logger_(3)\Logger.dll - 特征码 'Generic.Perfloger' 被发现

        3 个文件被扫描
          (0 个压缩档 0 个文件)
        3 个特征码被侦测
        0 个可疑代码段被发现
        耗时: 0:00.015

Nerazzurri

nod

Scan performed at: 2007-7-26 17:22:27
Scanning Log
NOD32 version 2421 (20070725) NT
Command line: C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar

Date: 26.7.2007  Time: 17:22:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar
C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar ?RAR ?Logger.dll - Win32/Spy.PerfKey.NAA trojan
C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar ?RAR ?Logger (1).dll - Win32/Spy.PerfKey.NAA trojan
Number of scanned files: 3
Number of threats found: 2
Time of completion: 17:22:30 Total scanning time: 1 sec (00:00:01)
________
avira

Start of the scan: 2007年7月26日  17:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar'
C:\Documents and Settings\Kevin\Desktop\病毒样本\Logger (3).rar
  [0] Archive type: RAR
  --> Logger (2).dll
      [DETECTION] Is the Trojan horse TR/Peflog.30.3
      [INFO]      The file was deleted!

xxwpk007

已删除: 风险软件 not-a-virus:Monitor.Win32.Perflogger.ca        文件: G:\样本\样本\Logger (3)\Logger (1).dll

kurakimai

IKARUS肯定用了VBA32+KAV的病毒库

不然哪里这么厉害

woai_jolin

[ 本帖最后由 woai_jolin 于 2007-7-26 17:39 编辑 ]

lsyer

--> Logger (2).dll
      [DETECTION] Is the Trojan horse TR/Peflog.30.3
  --> Logger.dll
      [DETECTION] Contains signature of the SPR/Perflogger.AB program
  --> Logger (1).dll
      [DETECTION] Contains signature of the SPR/Perflogger.CA.10 program
      [WARNING]   The file was ignored!

taihuxian

[0] Archive type: RAR
  --> Logger (2).dll
      [DETECTION] Is the Trojan horse TR/Peflog.30.3
  --> Logger.dll
      [DETECTION] Contains signature of the SPR/Perflogger.AB program
  --> Logger (1).dll
      [DETECTION] Contains signature of the SPR/Perflogger.CA.10 program
      [INFO]      A backup was created as '470f6ffb.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

taitan001

F:\Logger (3).rar:<RAR>\Logger (2).dll : infected Trojan.Peflog.30
F:\Logger (3).rar:<RAR>\Logger.dll : is suspected of Trojan.Perflog.1
F:\Logger (3).rar:<RAR>\Logger (1).dll : is suspected of Trojan.Perflog.bpkhk.dll.1

tracydk

avast继续挂...