27D444真正的鸽子在这里

显示全部楼层 · 发表于 2007-7-29 21:39:45

下面不远处挖的

显示全部楼层 · 发表于 2007-7-29 21:42:14

AVAST miss

显示全部楼层 · 发表于 2007-7-29 21:43:40

fscs pass

显示全部楼层 · 发表于 2007-7-29 21:44:21

C:\WINDOWS\system32\Racker33.exe 2007-07-29 21:41:41

显示全部楼层 · 发表于 2007-7-29 21:50:18

Main Menu
HOME About VirSCAN Report Help Us Submit Bugs Contacts

File information

File Name :	去除微~1.EXE
File Size :	596992 byte
File Type :	MS-DOS executable (EXE), OS/2 or MS Windows
MD5 :	27d44442461e6cfb4151ee5c5ff1df63
SHA1 :	da39a3ee5e6b4b0d3255bfef95601890afd80709

Scanner results

Scanner results :	16% Scanner(4/25) found malware!
Scan time :	2007/07/29 21:48:03

Scanner

Engine Ver
Sig Ver
Sig Date
Scan result
Scan time
A-Squared3.0.0.1232007.07.272007-07-27Found nothing4.008AntiVir7.4.0.506.39.0.1952007-07-28Found nothing2.232Arcavir1.0.42007072815552007-07-28Found nothing1.172Avast1.0.8000762-02007-07-29Found nothing3.041AVG7.5.47.442269.10.23/9242007-07-28BackDoor.Hupigon.GHI1.254BitDefender7.60825.7025127.140922007-07-29Found nothing5.845CA (VET)8.4.0.2431.1.50102007-07-27Found nothing0.859ClamAV0.91.138042007-07-29Found nothing0.228Dr.Web4.332007.07.292007-07-29Found nothing5.687Ewido4.0.0.22007.07.282007-07-28Found nothing2.121F-Prot3.16.162007.07.272007-07-27Found nothing0.648F-Secure5.51.61002007.07.29.012007-07-29Found nothing2.425IkarusT3.1.1.122007.07.29.692802007-07-29Trojan-PWS.Win32.Agent.iu1.274Kaspersky5.5.102007.07.292007-07-29Found nothing0.086KingSoft2007.6.20.2492007.7.282007-07-28Found nothing1.069McAfee5.1.0050852007-07-27Found nothing1.688mks_vir2.012007.07.292007-07-29Win32.41.901NOD322.70.724272007-07-28Found nothing3.655Norman5.90.375.902007-07-27Hupigon.gen1242.541Panda9.00.002007.07.292007-07-29Found nothing4.103Sophos5426445426442007-07-29Found nothing2.541Symantec1.3.0.2420070728.0052007-07-28Found nothing0.351Trend Micro8.500-10014.621.002007-07-27Found nothing0.225VBA323.12.2.120070729.07582007-07-29Found nothing0.977VirusBuster4.3.19:99.092.3/11.02007-07-29Found nothing0.903

显示全部楼层 · 发表于 2007-7-29 21:51:15

nod32 ps ..

显示全部楼层 · 发表于 2007-7-29 21:53:06

金山挂,费尔报灰鸽子

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\去除微~1.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\RACKER33.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\去除微~1.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\RACKER33.EXE
2) C:\WINDOWS.0\UNINSTAL.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\去除微~1.EXE
木马程序生成以下文件:
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\去除微~1.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\UNINSTAL.BAT
是否删除可疑程序?

显示全部楼层 · 发表于 2007-7-29 23:29:04

nod miss

显示全部楼层 · 发表于 2007-7-29 23:38:44

AVG最近还不错

显示全部楼层 · 发表于 2007-7-30 00:01:33

运行后
F-Secure Anti-Virus 2007的反应

[病毒样本] 27D444真正的鸽子在这里

本帖子中包含更多资源

本帖子中包含更多资源