_load_file.exe [md5:123cab]

显示全部楼层 · 发表于 2008-4-18 08:32:24

File:	._load_file.exe
Status:	INFECTED/MALWARE
MD5:	123cabfdc78c5b997866c9ee463b3318
Packers detected:	-
Bit9 reports:

Scanner results
Scan taken on 18 Apr 2008 00:30:20 (GMT)
A-Squared	Found Trojan-PSW.Win32.WOW.ari
AntiVir	Found TR/PSW.Wow.ari
ArcaVir	Found Dialer.On
Avast	Found Win32:Wow-FXO
AVG Antivirus	Found SHeur.AWKV
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found Troj.PSW.W32.WOW.ari
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-PSW.Win32.WOW.ari
Fortinet	Found nothing
Ikarus	Found Trojan.Win32.Meredrop
Kaspersky Anti-Virus	Found Trojan-PSW.Win32.WOW.ari
NOD32	Found nothing
Norman Virus Control	Found W32/Wow.DED
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Generic-A
VirusBuster	Found nothing
VBA32	Found Trojan-PSW.Win32.WOW.ari

显示全部楼层 · 发表于 2008-4-18 08:34:10

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/4/18
开始时间： 2008/4/18 08:33
引擎：引擎A (AVK 18.3470), 引擎B (AVKB 18.213)
启发式：开启
档案文件：开启
系统区域：开启

检测系统区域...
检测以下目录和文件：
C:\Documents and Settings\Administrator\桌面\新建文件夹\._load_file.rar

对象： ._load_file.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\新建文件夹\._load_file.rar
状态：检测到病毒
病毒： Trojan-PSW.Win32.WOW.ari (引擎A)
对象： ._load_file.rar
路径: C:\Documents and Settings\Administrator\桌面\新建文件夹
状态：检测到病毒
病毒： Trojan-PSW.Win32.WOW.ari (引擎A)

检测执行时间： 2008/4/18 08:33
1个文件已检测
1个受感染文件
0个可疑文件被发现

显示全部楼层 · 发表于 2008-4-18 08:35:21

C:\Documents and Settings\Administrator\桌面\._load_file.rar>>._load_file.exe TrojanPSW.WOW.ari.dtlf 木马还未处理

显示全部楼层 · 发表于 2008-4-18 12:04:48

金山 0

显示全部楼层 · 发表于 2008-4-18 18:46:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\._load_file.rar'
C:\Documents and Settings\Administrator\桌面\._load_file.rar
  [0] Archive type: RAR
  --> ._load_file.exe
   [DETECTION] Is the Trojan horse TR/PSW.Wow.ari
   [NOTE]    The file was moved to '48747c57.qua'!

End of the scan: 2008年4月18日  18:46
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-4-18 19:18:40

江民照样MISS

显示全部楼层 · 发表于 2008-4-18 21:45:35

McAfee Generic.dx

显示全部楼层 · 发表于 2008-4-18 21:49:35

rising20.40.42未杀！

[病毒样本] _load_file.exe [md5:123cab]

本帖子中包含更多资源

2/0