af55e5,瑞星报！

显示全部楼层 · 发表于 2007-9-6 16:17:13

瑞星报Worm.Win32.AvKiller

显示全部楼层 · 发表于 2007-9-6 16:18:45

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\Worm.Win32.AvKiller\sysgoo.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\Worm.Win32.AvKiller\sysgoo.exe]
                  …………特征码引擎[1]发现病毒
文件数:1 病毒数:2  比重:2
OK  扫描完毕！
RS一个我2

[ 本帖最后由 FBAV 于 2007-9-6 16:20 编辑 ]

显示全部楼层 · 发表于 2007-9-6 16:20:53

易语言编写的病毒

显示全部楼层 · 发表于 2007-9-6 16:21:02

detected: Trojan program Trojan.Win32.FlyStudio.ai URL: http://bbs.kafan.cn/attachment.p ... goo.exe//script.fly

显示全部楼层 · 发表于 2007-9-6 16:30:08

AhnLab-V3	2007.9.5.0	2007.09.06	-
AntiVir	7.6.0.5	2007.09.06	DR/FlyStudio.AI
Authentium	4.93.8	2007.09.06	W32/Backdoor.ARJU
Avast	4.7.1029.0	2007.09.05	-
AVG	7.5.0.485	2007.09.05	-
BitDefender	7.2	2007.09.06	Win32.Worm.Nuj.A
CAT-QuickHeal	9.00	2007.09.05	-
ClamAV	0.91.2	2007.09.06	-
DrWeb	4.33	2007.09.05	-
eSafe	7.0.15.0	2007.09.04	Win32.FlyStudio.ai
eTrust-Vet	31.1.5114	2007.09.06	-
Ewido	4.0	2007.09.05	-
FileAdvisor	1	2007.09.06	-
Fortinet	3.11.0.0	2007.09.06	W32/Delf.AQ!tr.dldr
F-Prot	4.3.2.48	2007.09.06	W32/Backdoor.ARJU
F-Secure	6.70.13030.0	2007.09.06	Trojan.Win32.FlyStudio.ai
Ikarus	T3.1.1.12	2007.09.06	Trojan.Win32.Agent.ala
Kaspersky	4.0.2.24	2007.09.06	Trojan.Win32.FlyStudio.ai
McAfee	5113	2007.09.05	-
Microsoft	1.2803	2007.09.06	Worm:Win32/Nuj.A
NOD32v2	2508	2007.09.06	-
Norman	5.80.02	2007.09.05	-
Panda	9.0.0.4	2007.09.06	W32/Nuj.A.worm
Prevx1	V2	2007.09.06	-
Rising	19.39.31.00	2007.09.06	Worm.Win32.AvKiller.ap
Sophos	4.21.0	2007.09.06	-
Sunbelt	2.2.907.0	2007.09.06	-
Symantec	10	2007.09.06	-
TheHacker	6.1.9.179	2007.09.06	-
VBA32	3.12.2.4	2007.09.06	Trojan.Click.2809
VirusBuster	4.3.26:9	2007.09.05	-
Webwasher-Gateway	6.0.1	2007.09.06	Trojan.FlyStudio.AI

显示全部楼层 · 发表于 2007-9-6 17:31:59

NOD32又挂

显示全部楼层 · 发表于 2007-9-6 18:40:59

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3303
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\sysgoo.exe

C:\Documents and Settings\uhthn\Desktop\sysgoo.exe - Infected with PDB-2373 Malware program - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-6 20:57:31

symantec pass

显示全部楼层 · 发表于 2007-9-6 21:29:30

结果: 找到 1 恶意软件
Trojan.Win32.FlyStudio.ai (病毒)
C:\Documents and Settings\ssy\桌面\sysgoo.rar\sysgoo.exe

显示全部楼层 · 发表于 2007-9-6 21:32:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\sysgoo.rar'
C:\Documents and Settings\tim\桌面\sysgoo.rar
  [0] Archive type: RAR
  --> sysgoo.exe
   [DETECTION] Contains detection pattern of the dropper DR/FlyStudio.AI
   [INFO]    A backup was created as '475301dc.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] af55e5,瑞星报！

本帖子中包含更多资源