发现一个DD,卡巴诺顿全PASS

醉一生爱妍

说错了，是运行到一般出错退出了

只捕获到几个TEMP的生成物

TMP的，闷死

[ 本帖最后由 garyyan456 于 2008-1-21 18:52 编辑 ]

qigang

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.1.21.10	2008.01.21	-
AntiVir	7.6.0.48	2008.01.21	HEUR/Crypted
Authentium	4.93.8	2008.01.21	-
Avast	4.7.1098.0	2008.01.20	Win32:BlackHole-G
AVG	7.5.0.516	2008.01.21	-
BitDefender	7.2	2008.01.21	Generic.Malware.SMP!Pk.F4ED9544
CAT-QuickHeal	9.00	2008.01.19	(Suspicious) - DNAScan
ClamAV	0.91.2	2008.01.21	-
DrWeb	4.44.0.09170	2008.01.21	BACKDOOR.Trojan
eSafe	7.0.15.0	2008.01.16	Suspicious File
eTrust-Vet	31.3.5475	2008.01.21	-
Ewido	4.0	2008.01.20	-
FileAdvisor	1	2008.01.21	-
Fortinet	3.14.0.0	2008.01.21	-
F-Prot	4.4.2.54	2008.01.21	-
F-Secure	6.70.13260.0	2008.01.21	-
Ikarus	T3.1.1.20	2008.01.21	Trojan-PWS.Win32.Agent.BU
Kaspersky	7.0.0.125	2008.01.21	-
McAfee	5211	2008.01.18	-
Microsoft	1.3109	2008.01.21	-
NOD32v2	2810	2008.01.21	probably unknown NewHeur_PE virus
Norman	5.80.02	2008.01.20	-
Panda	9.0.0.4	2008.01.20	Suspicious file
Prevx1	V2	2008.01.21	-
Rising	20.28.02.00	2008.01.21	-
Sophos	4.24.0	2008.01.21	Mal/VBWorm-C
Sunbelt	2.2.907.0	2008.01.17	VIPRE.Suspicious
TheHacker	6.2.9.191	2008.01.19	-
VBA32	3.12.2.5	2008.01.21	suspected of Backdoor.XiaoBird.270 (paranoid heuristics)
VirusBuster	4.3.26:9	2008.01.20	Packed/NSPack
Webwasher-Gateway	6.6.2	2008.01.21	Heuristic.Crypted

附加信息

File size: 85548 bytes

MD5: 2025e4dcbbd29b877f20d95f69d2f714

SHA1: 692b2136d6affe2f0ea33af83e873e781bbb1935

PEiD: -

packers: NsPack, NsPack

packers: NSPack, PE_Patch

Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

xiaohf

费尔、小红伞扫描过
运行后给费尔的动态防御拦截了

spaceplane

AVAST杀

我家蜘蛛怎么没查出来

电影结束了

d:\virus.zip:\MS-DOS.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found

挪威的冬天

日哦 改时间为公元 3000 年 害得我 cookie 又全都挂掉

Shisoft

各位帮忙想下办法，救救我的系统

bjtswktlks

算了，我是用卡巴的，不下了，免得中毒

冷冷

病毒不断的调用SYSTEM32程序




[MD5: 68D1B4 A8ED02 9484C0]

I:\virus\test\360tray.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\avp.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\CCenter.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\cmd.com - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\DirectX.com - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\Driver.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\getkey.dll - Signature 'Backdoor.Win32.Agent.ahj' found
I:\virus\test\IceSword.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\Iparmor.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\kabaload.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\KASMain.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\KVSrvXP.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\MS-DOS.pif - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\msconfig.com - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\Rav.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\RavMon.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\regedit.com - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\rfwcfg.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\RfwMain.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\SafeBoot.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\SVCH0ST.EXE - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\system32.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
I:\virus\test\WinUpdate.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
24 Files scanned
   (0 Archives with 0 files)
23 Signatures found
0 Suspect code-parts found
Used time: 0:00.157

PS:包里面只有3个，大部分是重复的

[ 本帖最后由 冷_冷 于 2008-1-21 20:28 编辑 ]

醉一生爱妍

冷你运行的到啊，我的沙盘运行不了- -