okgogogo.exe [md5:12847d]

mofunzone

File:	okgogogo.exe
Status:	INFECTED/MALWARE
MD5:	12847d7e904f97dcd7fe60458cc9e50f
Packers detected:	-
Bit9 reports:	File not found
Scanner results
Scan taken on 04 Sep 2007 06:54:32 (GMT)
A-Squared	Found  nothing
AntiVir	Found DR/Dldr.Delf.bmx.3
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.Delf.bmx
Fortinet	Found  nothing
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.Delf.bmx
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Rising Antivirus	Found  nothing
Sophos Antivirus	Found  nothing
VirusBuster	Found  nothing
VBA32	Found Trojan-Downloader.Win32.Delf.bmx

capsshift

又是一个多引擎红伞报的，不下了。

moonsilver

尊敬的客户，您好！
    您的邮件已经收到，感谢您对瑞星的支持。

    我们已经详细分析过您的问题和文件，以下是您上传的文件的分析结果：
    1.文件名：okgogogo.exe
    不是病毒



注意：如果您上报的文件损坏或者压缩包有密码保护，会导致我们无法正确分析，请您确认文件正常且压缩包中无密码后再提交。
如有问题，您可以通邮件服务中心与我们联系，详细描述您的问题，并且提供此封邮件主题中的流水单号以及上报所用的电子邮件地址。
提 醒：为保证收到您的来信，请勿直接回复本邮件!!!
-------------------------------------------------------------
发送邮件：请用IE等浏览器访问网址 http://csc.rising.com.cn
-------------------------------------------------------------

绅博周幸

We received the following archive files:



File ID  Filename  Size (Byte) Result
1302595  okgogogo.rar 222.15 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
1302596  okgogogo.exe  236.08 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
okgogogo.exe  MALWARE

The file 'okgogogo.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Delf.bmx.3. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 6.39.00.238.

caocao

KIS7
已经删除: 木马程序 Trojan-Downloader.Win32.Delf.bmx        文件: D:\Downloads\okgogogo.rar/okgogogo.exe//data0003
本来就是病毒吗，瑞星居然分析不是病毒！

wanglaoban

kaspersky 6.0 detects it.

also created: scvhost.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bmx    File: C:\Documents and Settings\user\Desktop\scvhost.exe

log:
c:\documents and settings\user\desktop\okgogogo.exe
%userprofile%\desktop\okgogogo.exe
%systemroot%\md9\scvhost.exe
:HKCU\software\microsoft\internet explorer\extensions\cmdmapping\"{1f460357-8a94-4d71-9ca3-aa4acf32ed8e}"=""
:HKCU\software\microsoft\internet explorer\extensions\cmdmapping\"{cf819da3-9882-4944-adf5-6ef17ecf3c6e}"=""

delete them!

saga3721

瑞星指责卡巴误杀严重看来是出于真心的

绅博周幸

X星分析师搞毛啊

运行了半天没反应。。。。
半死不活？

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\okgogogo.rar'
F:\病毒样本\okgogogo.rar
  [0] Archive type: RAR
  --> okgogogo.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Delf.bmx.3
      [INFO]      The file was deleted!