被过的不少

Redevil

RT

是SkypeClient

[ 本帖最后由 Redevil 于 2007-11-30 21:56 编辑 ]

Redevil

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2007.11.30.1 2007.11.30 -
AntiVir 7.6.0.34 2007.11.30 HEUR/Malware
Authentium 4.93.8 2007.11.30 -
Avast 4.7.1074.0 2007.11.29 Win32:Baidubar-B
AVG 7.5.0.503 2007.11.29 -
BitDefender 7.2 2007.11.30 -
CAT-QuickHeal 9.00 2007.11.30 (Suspicious) - DNAScan
ClamAV 0.91.2 2007.11.30 -
DrWeb 4.44.0.09170 2007.11.30 -
eSafe 7.0.15.0 2007.11.29 Suspicious File
eTrust-Vet 31.3.5338 2007.11.30 -
Ewido 4.0 2007.11.30 -
FileAdvisor 1 2007.11.30 -
Fortinet 3.14.0.0 2007.11.30 -
F-Prot 4.4.2.54 2007.11.29 -
F-Secure 6.70.13030.0 2007.11.30 -
Ikarus T3.1.1.12 2007.11.30 -
Kaspersky 7.0.0.125 2007.11.30 -
McAfee 5174 2007.11.29 -
Microsoft 1.3007 2007.11.30 -
NOD32v2 2695 2007.11.30 -
Norman 5.80.02 2007.11.29 -
Panda 9.0.0.4 2007.11.29 -
Prevx1 V2 2007.11.30 Heuristic: Suspicious Self Modifying EXE
Rising 20.20.40.00 2007.11.30 -
Sophos 4.23.0 2007.11.30 -
Sunbelt 2.2.907.0 2007.11.30 VIPRE.Suspicious
Symantec 10 2007.11.30 -
TheHacker 6.2.9.145 2007.11.30 -
VBA32 3.12.2.5 2007.11.30 -
VirusBuster 4.3.26:9 2007.11.29 -
Webwasher-Gateway 6.6.2 2007.11.30 Heuristic.Malware

promised

C:\ABC\4004\4004.exe
        C:\ABC\4004\4004.exe\FILE:0000
>>> File "C:\ABC\4004\4004.exe" has been identified as suspicious 'Sus/Malware-A'.
Please send infected samples to Sophos for analysis.
For advice consult www.sophos.com, email support@sophos.com
or telephone +44 1235 559933
Ending Sophos Anti-Virus.

qigang

RX20.20.42过。

scottxzt

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\4004.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DOEQCLZZIZFWD.DLL
是否删除木马程序及其衍生物?

testhawk

fs扫描不报,运行报.


[ 本帖最后由 testhawk 于 2007-12-1 00:12 编辑 ]

sam.to

已上报給卡巴，nod和symantec

aerbeisi

检测到：广告程序 not-a-virus:AdWare.Win32.Ejik.k        文件　: F:\du\4004.rar/4004.exe//PE_Patch.PECompact//PecBundle//PECompact

will

Win32:Baidubar-B [Trj]

flykiss

dr.web 4.44   没反应~~~