更新[C582F7]

显示全部楼层 · 发表于 2007-10-6 14:48:38

it looks dead

显示全部楼层 · 发表于 2007-10-6 14:49:14

好，又一个168

显示全部楼层 · 发表于 2007-10-6 14:49:45

no virus found

显示全部楼层 · 发表于 2007-10-6 14:52:18

上报了
File: playasp.exe
Status: INFECTED/MALWARE
MD5: c582f7678e9484069f3027ddc8829318
Packers detected: -
Bit9 reports: File not found

Scanner results
Scan taken on 06 Oct 2007 06:51:40 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found BehavesLike:Trojan.Downloader (probable variant)
ClamAV Found Trojan.Spy.Banker-5858
CPsecure Found Troj.Spy.W32.Arsys
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found Sandbox: W32/Downloader; [ General information ]

* File length: 417792 bytes.

[ Changes to filesystem ]
* Creates file C:\arun.reg.
* Deletes file c:\arun.reg.
* Creates file C:\WINDOWS\SYSTEM32\wxpSetup.txt.
* Creates file C:\WINDOWS\SYSTEM32\wxpSetup.exe.
* Deletes file C:\WINDOWS\SYSTEM32\wxpSetup.txt.

[ Network services ]
* Downloads file from http://www1.softuu.cn/download/wxpSetup.txt as C:\WINDOWS\SYSTEM32\wxpSetup.txt.
* Connects to "www1.softuu.cn" on port 80 (TCP).
* Opens URL: www1.softuu.cn/download/wxpSetup.txt.

[ Security issues ]
* Starting downloaded file - potential security problem.

[ Process/window information ]
* Creates an event called .
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found nothing
VirusBuster Found Trojan.PWS.Agent.JBN.Gen
VBA32 Found nothing

显示全部楼层 · 发表于 2007-10-6 16:07:26

rs挂了

显示全部楼层 · 发表于 2007-10-6 16:14:16

紅傘C　　pass

显示全部楼层 · 发表于 2007-10-6 16:42:03

金山毒霸挂了

显示全部楼层 · 发表于 2007-10-6 17:18:36

kaba pass

显示全部楼层 · 发表于 2007-10-6 19:09:52

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 326
Paranoia Database - 6878
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\playasp.exe

C:\Documents and Settings\uhthn\Desktop\playasp.exe - Infected Win32.Trojan.inject.1

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

[病毒样本] 更新[C582F7]

本帖子中包含更多资源

本帖子中包含更多资源