查看: 7650|回复: 4
收起左侧

[可疑文件] 不知道是什么玩意……SecurityRisk.Cmdow?

[复制链接]
rodneyxp2002
发表于 2008-1-11 02:11:31 | 显示全部楼层 |阅读模式
赛门铁克企业版报SecurityRisk.Cmdow
Updated: December 13, 2007 11:02:30 AM
Type: Spyware
Infection Length: 31,232 bytes
Name: cmdow
Version: 1.4.3
Publisher: Ritchie Lawrence
Risk Impact: Low
Systems Affected: Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000

BehaviorSecurityRisk.Cmdow is a command line tool that can enumerate and manipulate windows.


Protection
  • Initial Rapid Release version pending
  • Latest Rapid Release version December 25, 2007 revision 037
  • Initial Daily Certified version December 12, 2007 revision 023
  • Latest Daily Certified version December 25, 2007 revision 036
  • Initial Weekly Certified release date December 19, 2007



扫描结果 :  36%的杀软(13/36)报告发现病毒
时间 :  2008/01/11 02:06:38 (CST)
软件名称引擎版本
病毒库版本
病毒库时间
扫描结果
时间
a-squared3.0.0.1262008.01.092008-01-09Riskware.RiskTool.Win32.HideWindows
6.039
AntiVir7.6.0.467.0.1.2202008-01-10SPR/HideWindows.I
5.897
Arcavir1.0.42008010919122008-01-09Riskware.Risktool.Hidewindows
1.432
AVAST1.0.8080109-02008-01-09-
4.730
AVG7.5.49.442269.17.13/12122008-01-06HideExec.BD
2.329
BitDefender7.60825.9670397.168292008-01-10-
4.545
CA (VET)9.0.0.14331.3.54462008-01-10-
8.255
ClamAV 0.91.254702008-01-10-
0.037
Comodo2.112.0.0.4002008-01-10-
1.119
CP Secure1.1.0.6552008.01.102008-01-10-
10.569
Dr.WEB4.44.0.91702008.01.102008-01-10-
6.165
ewido4.0.0.22008.01.032008-01-03-
2.446
F-PROT4.4.1.52200801092008-01-09W32/HackToolX.DY (exact)
1.558
F-SECURE5.51.61002008.01.09.062008-01-09-
0.045
IKARUST3.1.01.152008.01.03.700932008-01-03not-a-virus:RiskTool.Win32.HideWindows
1.246
MKS_VIR2.012008.01.102008-01-10Trojan.HideWindows
3.326
NOD322.70.1027802008-01-10Win32/CMDOW.143 application
0.004
NORMAN5.91.085.902008-01-09-
8.515
nProtect2008-01-10.0111190392008-01-10Trojan-Spy/W32.Hidewindows.31232
5.081
PrevxV2200801112008-01-11-
8.499
QuickHeal9.002008.01.102008-01-10RiskTool.HideWindows (Not a Virus)
2.569
SOPHOS2.49.14.212008-01-08-
10.498
The Hacker6.2.9v001852008-01-09Aplicacion/HideWindows (Unwanted)
0.887
VBA323.12.2.520080109.20402008-01-09-
2.496
ViRobot200801102008.01.102008-01-10-
0.461
VirusBuster4.3.19:99.119.2/11.02008-01-10-
2.304
卡巴斯基5.5.102008.01.102008-01-10not-a-virus:RiskTool.Win32.HideWindows
9.857
安博士V32008.01.10.022008.01.102008-01-10-
1.290
江民杀毒10.00.6502008.01.072008-01-07-
1.422
熊猫卫士9.04.03.00012008.01.092008-01-09Application/HideWindow.S
3.028
瑞星19.020.26.32.002008-01-10-
1.801
赛门铁克1.3.0.2420080109.0062008-01-09-
0.235
趋势8.500-10014.940.032008-01-10-
0.041
迈克菲5.2.0052032008-01-09-
2.021
金山毒霸2007.6.20.2492008.1.102008-01-10-
1.197
飞塔2.81-3.118.4492007-12-03-
0.472



有个奇怪的是,我的2008-1-9 rev.6的赛门铁克报了(这个东西Updated: December 13, 2007 11:02:30 AM,就是说这个已经是12月13日就入病毒库了 http://securityresponse.symantec.com/security_response/writeup.jsp?docid=2007-121221-0731-99),而VirSCAN的赛门铁克(库也是20080109.006的啊)却没报?

[ 本帖最后由 rodneyxp2002 于 2008-1-11 02:14 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
剑书
头像被屏蔽
发表于 2008-1-11 03:25:26 | 显示全部楼层
Starting the file scan:

Begin scan in 'K:\CMDOW.rar'
K:\CMDOW.rar
  [0] Archive type: RAR
  --> CMDOW.EXE
      [DETECTION] Contains detection pattern of the SPR/HideWindows.I program
      [INFO]      A backup was created as '47ca714c.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
leonfg
发表于 2008-1-11 08:27:56 | 显示全部楼层
总之不是病毒
winxp0286
发表于 2008-1-11 08:28:06 | 显示全部楼层
費爾報黑客工具!!!
jick117
发表于 2008-1-11 10:26:51 | 显示全部楼层
Virus: not-a-virus:RiskTool.Win32.HideWindows

Virus found while downloading Web content.

Address: bbs.kafan.cn
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-2-4 03:23 , Processed in 0.085311 second(s), 4 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表