1

tonger2003

sam.to

Kis 7找不到,已上报

sam.to

Hello,

most[1].exe_ - Backdoor.Win32.Popwin.anl

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

风野胤

刚更新高启的那几天
nod一向是吃火药的
R:\most[1].rar » RAR » most[1].exe - a variant of Win32/TrojanDownloader.Flux trojan

[ 本帖最后由 风野胤 于 2007-11-18 00:33 编辑 ]

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 906
Paranoia Database - 48810
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\most[1].exe

C:\Documents and Settings\Uhthn\Desktop\most[1].exe - Infected BACKDOOR.AGENT.9 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted

a750828

McAfee New Poly Win32

tun

oops.

1 file swept in 12 seconds.
No viruses were discovered.
Ending Sophos Anti-Virus.


CA
文件 C:\Scan\most[1].rar<most[1].exe> 已感染以下病毒:Win32/Pipown!generic

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\most[1].rar'
C:\Users\morgan\Documents\
  most[1].rar
    [0] Archive type: RAR
    --> most[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

wangjay1980

detected: Trojan program Backdoor.Win32.Popwin.anl        URL: http://bbs.kafan.cn/attachment.php?aid=154438//most[1].exe

icefall

虚拟机方式加壳？