一个木马[MD5: B312A8]

微点卫士

金山,费尔都挂了

微点:
木马名称:未知间谍软件
程序:
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSINFO.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\我是木马哦.EXE
是否删除木马程序及其衍生物?

scottxzt

微点卫士.rar\我是木马哦.exe;C:\Documents and Settings\dell\桌面\微点卫士.rar;Trojan.PWS.Wow.origin;;

mofunzone

File:	微点卫士.rar
Status:	INFECTED/MALWARE
MD5:	59d386c00af2818ea26f25956ea6f9fc
Packers detected:	UPACK
Bit9 reports:	File not found
Scanner results
Scan taken on 29 Jul 2007 06:29:55 (GMT)
A-Squared	Found nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found nothing
Avast	Found Win32:Delf-CSQ
AVG Antivirus	Found Generic5.ZQM
BitDefender	Found DeepScan:Generic.Malware.SFMBdld.0AAF45D0
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found W32/Downloader.gen10
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably a variant of Win32/Genetik (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Packer
VirusBuster	Found Packed/Upack
VBA32	Found MalwareScope.Trojan-PSW.Game.15

微点卫士

原帖由 scottxzt 于 2007-7-29 14:29 发表
微点卫士.rar\我是木马哦.exe;C:\Documents and Settings\dell\桌面\微点卫士.rar;Trojan.PWS.Wow.origin;;

奇怪了,这是盗诛仙号的,怎么有WOW字眼,难道也可以盗魔兽世界的号???

红心王子

。。

大多数杀软都报了这个毒，失望的是卡巴没报

天天总知道更新自己的病毒库，都不知道它更新什么了。。

AhnLab-V3	2007.7.28.0	2007.07.27	-
AntiVir	7.4.0.50	2007.07.28	HEUR/Malware
Authentium	4.93.8	2007.07.27	W32/Downloader.gen10
Avast	4.7.997.0	2007.07.28	Win32:Nilage-AI
AVG	7.5.0.476	2007.07.28	Generic5.ZQM
BitDefender	7.2	2007.07.29	DeepScan:Generic.Malware.SFMBdld.0AAF45D0
CAT-QuickHeal	9.00	2007.07.28	(Suspicious) - DNAScan
ClamAV	0.91	2007.07.29	-
DrWeb	4.33	2007.07.28	DLOADER.Trojan
eSafe	7.0.15.0	2007.07.24	suspicious Trojan/Worm
eTrust-Vet	31.1.5010	2007.07.28	-
Ewido	4.0	2007.07.28	-
FileAdvisor	1	2007.07.29	-
Fortinet	2.91.0.0	2007.07.29	-
F-Prot	4.3.2.48	2007.07.27	W32/Downloader.gen10
F-Secure	6.70.13030.0	2007.07.27	W32/Malware
Ikarus	T3.1.1.8	2007.07.29	Trojan-Dropper.Win32.Agent.ane
Kaspersky	4.0.2.24	2007.07.29	-
McAfee	5085	2007.07.27	New Malware.n
Microsoft	1.2704	2007.07.29	PWS:Win32/QQpass.CZ
NOD32v2	2427	2007.07.28	probably a variant of Win32/Genetik
Norman	5.80.02	2007.07.27	-
Panda	9.0.0.4	2007.07.28	Suspicious file
Rising	19.33.61.00	2007.07.29	-
Sophos	4.19.0	2007.07.26	Mal/Packer
Sunbelt	2.2.907.0	2007.07.28	VIPRE.Suspicious
Symantec	10	2007.07.29	-
TheHacker	6.1.7.156	2007.07.29	-
VBA32	3.12.2.1	2007.07.29	-
VirusBuster	4.3.26:9	2007.07.28	-
Webwasher-Gateway	6.0.1	2007.07.29	Heuristic.Malware

红心王子

那没准 这个都不好说

mingwang69

FS很强嘛……蹿到卡巴头上了……panda太可怕了……
C:\Documents and Settings\Admin\桌面\微点卫士.rar ?RAR ?我是木马哦.exe - 可能是 Win32/Genetik 木马 变种

lsyer

我怀疑所有文件熊猫都报Suspicious file

雨伞又高启发
上报~

微点卫士

原帖由 lsyer 于 2007-7-29 15:27 发表
我怀疑所有文件熊猫都报Suspicious file

雨伞又高启发
上报~

熊猫的启发难道很强么?

jimmyleo

panda在多引擎上cmd版本~ 你去用用肽金版才知道它真正的势力