spool32.rar [md5:1ca1dc]

显示全部楼层 · 发表于 2008-1-25 15:50:37

生成物n分之一

File:	spool32.rar
Status:	INFECTED/MALWARE
MD5:	1ca1dc7683708e626bcf8b2184faf6cb
Packers detected:	PE_PATCH.UPX, UPX
Bit9 reports:	File not found

Scanner results
Scan taken on 25 Jan 2008 07:45:08 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dldr.PurityScan.FJ
ArcaVir	Found Trojan.Downloader.Purityscan.Fj
Avast	Found Win32:PurityScan-Q
AVG Antivirus	Found Downloader.Generic6.AELI
BitDefender	Found Adware.Purityscan.JA
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Adware.MediaTicket.origin
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.PurityScan.fj
Fortinet	Found W32/PurityScan.FJ!tr.dldr
Ikarus	Found Trojan-Downloader.Win32.PurityScan.eg
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.PurityScan.fj
NOD32	Found a variant of Win32/TrojanDownloader.PurityScan
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Heuri-E
VirusBuster	Found Trojan.DL.CLSpring.Gen
VBA32	Found Trojan-Downloader.Win32.PurityScan.fj

显示全部楼层 · 发表于 2008-1-25 15:52:41

C:\Users\Wesley\Downloads\spool32.rar
  [0] Archive type: RAR
  --> spool32.exe
   [DETECTION] Is the Trojan horse TR/Dldr.PurityScan.FJ

显示全部楼层 · 发表于 2008-1-25 15:56:16

D:\download\spool32.rar>>spool32.exe Adware.Purityscan.evis 广告程序还未处理

显示全部楼层 · 发表于 2008-1-25 16:31:46

HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AABS "C:\WINDOWS\SYSTEM32\ΑDOBE\REGEDIT.EXE" -VT YAZB

显示全部楼层 · 发表于 2008-1-25 16:32:28

江民不认识～～

显示全部楼层 · 发表于 2008-1-25 20:35:18

显示全部楼层 · 发表于 2008-1-25 20:43:42

[ 本帖最后由冷_冷于 2008-1-25 20:55 编辑 ]

显示全部楼层 · 发表于 2008-1-25 20:47:12

Rising20.28.42未杀！

显示全部楼层 · 发表于 2008-1-25 20:54:46

McAfee MISS

[病毒样本] spool32.rar [md5:1ca1dc]