eba295疑似灰鸽子

455060250

MD5：eba29537b132e02671d4da321a70f02a
Windows优化大师的注册机，被费尔查出鸽子
已经提交给Antivir、Avast、Kaspersky、瑞星、江民
在线查结果：

Scan taken on 11 Aug 2007 11:28:14 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found BackDoor.Pigeon.1604
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found W32/Hupigon.gen67
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found Packed/NSPack
VBA32	Found Trojan.DownLoader.3692

[ 本帖最后由 455060250 于 2007-8-11 19:46 编辑 ]

小邪邪

咖啡报了

woai_jolin

ca pass

allenhippo

IKARUS - T3SCAN V1.27 (WIN32)
         T3 V1.01.12
         Copyright (c) 2003 - 2007 by IKARUS Software.
         Written by Richard Schmoegner.
         All rights reserved.

Signature-database from 11.8.2007 11:09:11 (Build: 69336)


G:\virus\temp\gezi.rar:\gezi.exe - Signature 'Backdoor.Win32.Agent.ahj' found



                                                                              

        2 Files scanned

          (1 Archiv with 1 file)

        1 Signature found

        0 Suspect code-parts found

        Used time: 0:00.063

lsyer

捆了鸽子而已~
注册机是正常的~

taihuxian

2007-8-11,19:50:27 [WARNING] Contains suspicious code HEUR/Damaged!
  C:\WINDOWS\Temp\_avast4_\unp180183397.tmp
      [INFO] The file will be moved to quarantine.

微点卫士

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\GEZI.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM\ALG.EXE
是否删除木马程序及其衍生物?木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\MS3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

xjw_1990

卡巴7.0没报～～～

1688388728

后门(Backdoor.Huigezi.2007.zhz.qbil.arc): D:\病毒库\GEZI\GEZI.EXE

lsyer

1) C:\WINDOWS.0\SYSTEM\ALG.EXE
ALG.EXE是什麽？
嘗試了幾次
沒有看見這個動作啊