install.exe [md5:fa57ce4]

mofunzone

File:	install.exe
Status:	INFECTED/MALWARE
MD5:	fa57ce4bd5b42c906493db652ccb7d2c
Packers detected:	-
Bit9 reports:	File not found
Scanner results
Scan taken on 18 Apr 2008 00:18:21 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Dldr.FraudLoad.LP.4
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found SHeur.BFEW
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.FraudLoad.lp
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.FraudLoad.lp
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Troj/Dorf-BB
VirusBuster	Found Trojan.Renos.Gen!Pac.10
VBA32	Found  nothing

Joker

这玩意自己本身不下载东西。生成一个下载者。
而且添加启动项，开机自动下载

aerbeisi

[Found Trojan]         <W32/Trojan!fc81 (exact, not disinfectable)>        C:\test\install.rar->install.exe

gaojun7206

病毒： Trojan-Downloader.Win32.FraudLoad.lp (引擎A)

wjzdw

............二话不说 把俺的电脑关了....

挪威的冬天

金山 0

冷冷

IKARUS
I:\virus\样本区\install.rar:\install.exe - Signature 'Trojan.Win32.Tibs.H' found
I:\virus\样本区\install.rar

        2 Files scanned
          (1 Archiv with 1 file)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.000

ballakay

Scanning Report
18 April 2008 13:32:25 - 13:32:25
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\install.rar


--------------------------------------------------------------------------------

Result: 1 malware found
Trojan-Downloader.Win32.FraudLoad.lp (virus)
C:\Users\Administrator\Desktop\install.rar\install.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-04-18_01
Spyware: 2008-04-18_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-04-18
F-Secure Libra: 2.04.04, 2008-04-15
F-Secure Orion: 1.02.38, 2008-04-18
F-Secure Draco: 1.00.35, 2008-04-02
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Quarantine and delete
Spyware: Quarantine and delete

Palkia

原帖由 Joker 于 2008-4-18 08:33 发表
这玩意自己本身不下载东西。生成一个下载者。
而且添加启动项，开机自动下载

果然~

solcroft