24.exe [md5:79c547]

显示全部楼层 · 发表于 2007-10-13 13:36:28

File:	24.exe
Status:	INFECTED/MALWARE
MD5:	79c54782ead19013b31abc8aaab61aea
Packers detected:	PE-CRYPT.XORPE, PE_PATCH.UPX, UPX
Bit9 reports:	File not found

Scanner results
Scan taken on 13 Oct 2007 05:35:02 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Agent.buu.1
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Downloader.Agent.YQA
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Downloader:W32/Agent.FAP, Trojan.Win32.Agent.buu
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Trojan.Win32.Agent.buu
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan.Win32.Agent.buu

显示全部楼层 · 发表于 2007-10-13 13:43:37

C:\ABC\24.rar:\24.exe - 特征码 'Trojan.Win32.Agent.buu' 被发现

显示全部楼层 · 发表于 2007-10-13 13:44:49

FCB?
file control block???
老毒中的老毒的老祖宗了，如果它是毒的话

[ 本帖最后由 solcroft 于 2007-10-13 15:16 编辑 ]

显示全部楼层 · 发表于 2007-10-13 13:46:37

非pe.........

显示全部楼层 · 发表于 2007-10-13 14:37:35

我都不能运行的，你的黑框框里的英文我没的

显示全部楼层 · 发表于 2007-10-13 22:24:59

2007-10-13 22:24:58 应用程序保护(运行应用程序) 操作:阻止
进程路径:C:\WINDOWS\explorer.exe
文件路径:C:\WINDOWS\system32\ntvdm.exe
命令行:-f -i1 -o

显示全部楼层 · 发表于 2007-10-13 23:31:00

KV报GamePass

[病毒样本] 24.exe [md5:79c547]