搜索
查看: 2960|回复: 10
收起左侧

[已鉴定] XiaoBird,[81039b]

 关闭 [复制链接]
绅博周幸
发表于 2007-10-4 16:19:12 | 显示全部楼层 |阅读模式
a-squared3.0.0.1232007.10.032007-10-03-
22.619
AntiVir7.6.0.187.0.0.462007-10-03HEUR/Crypted
6.455
Arcavir1.0.42007100320122007-10-03-
8.330
AVAST1.0.8000778-22007-10-03-
6.731
AVG7.5.49.442269.13.37/10422007-10-01Packed.AverCrypt
5.114
BitDefender7.60825.8982407.151062007-10-04-
11.252
CA (VET)8.4.0.2431.2.51852007-10-04-
1.690
ClamAV 0.91.244622007-10-04-
2.245
Comodo2.112.0.0.3032007-09-04-
2.105
Dr.WEB4.332007.10.032007-10-03DLOADER.Trojan
14.950
ewido4.0.0.22007.10.032007-10-03-
34.816
F-PROT4.4.0.50200709302007-09-30-
4.328
F-SECURE5.51.61002007.10.04.012007-10-04-
9.299
IKARUST3.1.1.122007.10.03.696122007-10-03suspicious(level 45)
3.426
MKS_VIR2.012007.10.032007-10-03-
11.565
NOD322.70.1025702007-10-03probably a variant of Win32/Genetik trojan
27.435
NORMAN5.91.085.902007-10-03-
43.427
nProtect2007-10-04.009628322007-10-04-
43.632
QuickHeal9.002007.10.032007-10-03Suspicious - DNAScan
4.190
SOPHOS2.49.14.212007-10-04-
10.272
The Hacker6.2.6v000762007-10-02-
15.435
VBA323.12.2.420071003.05092007-10-03Backdoor.XiaoBird.2 (paranoid heuristics) (suspicious)
113.566
ViRobot200710022007.10.022007-10-02-
1.080
VirusBuster4.3.19:99.107.6/11.02007-10-03-
12.827
卡巴斯基5.5.102007.10.042007-10-04Trojan.Win32.Delf.ahg
1.081
江民杀毒10.00.6502007.09.302007-09-30-
1.134
熊猫卫士9.04.03.00012007.10.032007-10-03-
11.155
瑞星19.019.43.20.002007-10-03-
7.775
赛门铁克1.3.0.2420071003.0352007-10-03-
0.416
趋势8.500-10014.755.002007-10-02-
1.077
迈克菲5.2.0051332007-10-03-
8.453
金山毒霸2007.6.20.2492007.10.42007-10-04-
1.698
飞塔2.81-3.118.1832007-10-03Suspicious
13.626
注意: 就算报告发现病毒,也可能是杀软误报,请根据查毒结果自行判断
复制到剪贴板


[ 本帖最后由 绅博周幸 于 2007-10-4 16:20 编辑 ]

alqq.rar

153.58 KB, 下载次数: 289

FBAV
发表于 2007-10-4 16:20:24 | 显示全部楼层
MicroVita AntiSpyware  
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\alqq\alqq.exe]
                    …………发现Spy!报告:[1]
文件信息:  大小:166912  MD5:81039bd0df1302dba202f7fbcb2a9baf

文件数:1   病毒数:1  比重:1
OK  扫描完毕!
  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

阿拉?

[ 本帖最后由 FBAV 于 2007-10-4 16:22 编辑 ]
king6808
发表于 2007-10-4 16:45:26 | 显示全部楼层
检测到:木马程序 Trojan.Win32.Delf.ahg        URL: http://bbs.kafan.cn/attachment.p ... q.exe//PE-Crypt.PNH
Guanguancan
发表于 2007-10-4 16:47:42 | 显示全部楼层
阿拉QQ大盗?
IllusionWing
发表于 2007-10-4 16:48:35 | 显示全部楼层
啊拉qq大盗?

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.2.0
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项:扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\alqq.rar>>alqq.exe 检测到 Generic.Binder
检测到了 1 个未知的恶意程序,请上报。
任务 扫描 完成。共耗费的时间:0-00-00 00:00:00:0547,共扫描的文件数量:2,共扫描到的威胁数量:1,威胁率:0.5
Guanguancan
发表于 2007-10-4 16:49:03 | 显示全部楼层
Attempt to create service
Attempt to set value Common Favorites within the key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\
taihuxian
发表于 2007-10-4 16:50:53 | 显示全部楼层
卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135211 is infected with Trojan.Win32.Delf.ahg virus
hahacomcn
发表于 2007-10-4 16:51:29 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\Administrator\桌面\alqq.rar'
C:\Documents and Settings\Administrator\桌面\alqq.rar
  [0] Archive type: RAR
  --> alqq.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
微点卫士
发表于 2007-10-4 19:26:57 | 显示全部楼层
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ALQQ.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS.0\FAVORITES\NETSERVICE.EXE
是否删除木马程序及其衍生物?
uhthn2002
发表于 2007-10-4 23:37:10 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 305
Paranoia Database - 6796
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\alqq.exe

C:\Documents and Settings\uhthn\Desktop\alqq.exe - Suspected MalwareDetector:Win32.Generic.PSW.1

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 湘ICP备2021004765号-1 ) GMT+8, 2021-5-7 21:28 , Processed in 0.146019 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表