server.exe [md5:2eea4c]

显示全部楼层 · 发表于 2007-9-4 13:38:04

File:	server.exe
Status:	INFECTED/MALWARE
MD5:	2eea4c14c56d78bf35d4aa5e5a50c549
Packers detected:	-
Bit9 reports:	File not found

Scanner results
Scan taken on 04 Sep 2007 05:36:31 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.NSPM.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Trojan-PSW.Win32.Maran.mu
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2007-9-4 13:45:03

已检测到: 木马程序 Trojan-PSW.Win32.Maran.mu URL: http://bbs.kafan.cn/attachment.php?aid=123183//server.exe

显示全部楼层 · 发表于 2007-9-4 13:47:30

--> server.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    A backup was created as '474ef1c1.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-4 14:39:13

微点砍掉

显示全部楼层 · 发表于 2007-9-4 14:56:23

log
c:\windows\avp.exe
%systemroot%\avp.exe
%windir%\system32\delplme.bat
%windir%\system32\hvsound2.dll
%userprofile%\desktop\server.exe

Delete them!

显示全部楼层 · 发表于 2007-9-4 16:22:09

C:\ABC\server.rar:\server.exe - 可疑代码段被发现 (Level: 50)
C:\ABC\server.rar

2 文件被扫描
(1 压缩档 1 文件)
0 特征码被侦测
1 可疑代码段被发现
耗时: 0:00.062

显示全部楼层 · 发表于 2007-9-4 19:04:09

Start of the scan: Tuesday, 4 September, 2007  19:04

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\server.rar'
C:\Documents and Settings\tim\桌面\server.rar
  [0] Archive type: RAR
  --> server.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    A backup was created as '474f3c08.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-4 21:33:41

楼上报红伞能查，我就不下载了。

显示全部楼层 · 发表于 2007-9-4 22:40:37

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2759
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\server.exe

C:\Documents and Settings\uhthn\Desktop\server.exe - Suspicious file

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-5 00:06:36

[病毒样本] server.exe [md5:2eea4c]

本帖子中包含更多资源

本帖子中包含更多资源

log

本帖子中包含更多资源

本帖子中包含更多资源