过卡

f286168511

欠妳緈諨

D:\病毒测试\未解压样本\add5.rar » RAR » add5.exe - a variant of Win32/TrojanDownloader.Flux trojan

[ 本帖最后由 欠你幸福 于 2008-1-3 11:55 编辑 ]

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\add5.rar'
C:\Documents and Settings\Administrator\桌面\add5.rar
  [0] Archive type: RAR
  --> add5.exe
      [DETECTION] Is the Trojan horse TR/Autorun.CA
      [INFO]      The file was deleted!

scottxzt

2008-1-3 12:02:54,Backdoor.DKA.vase,后门,dell,C:\Documents and Settings\dell\桌面\add5.rar>>add5.exe,Manual scan

wangfeng66

C:\add5[1].rar\add5.exe - infected with Trojan.Popwin.origin

Archive contains an infected item

DREWB   4.44

千里同风

脱壳之后。附件名称是乱写的（该毒有AUTORUN.INF嫌疑）

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\AUTO.rar'
C:\Documents and Settings\Administrator\My Documents\
  AUTO.rar
    [0] Archive type: RAR
    --> AUTO.exe
        [DETECTION] Is the Trojan horse TR/Autorun.CA
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!

曲中求

不错，突破组策略修改时间，卡巴失效。

28654621

费尔
Backdoor.DKA.vase

leonfg

ESET
C:\Documents and Settings\GUNDAM\桌面\add5.rar » RAR » add5.exe - a variant of Win32/TrojanDownloader.Flux trojan