gamecodec1000.exe [md5:e7abde]

mofunzone

File:	gamecodec1000.exe
Status:	INFECTED/MALWARE
MD5:	e7abdea35d10476144fd13e34c757444
Packers detected:	-
Bit9 reports:	High threat detected (more info)
Scanner results
Scan taken on 18 Apr 2008 04:26:35 (GMT)
A-Squared	Found  nothing
AntiVir	Found DR/DNSChanger.ARN.450
ArcaVir	Found  nothing
Avast	Found Win32:Trojan-gen {Other}
AVG Antivirus	Found DNSChanger.AA
BitDefender	Found Dropped:Trojan.Downloader.Zlob.ABOU
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found Trojan.Win32.DNSChanger.arn
Fortinet	Found W32/DNSChanger.ARN!tr
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found Trojan.Win32.DNSChanger.arn
NOD32	Found  nothing
Norman Virus Control	Found DNSChanger.AHRY
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/Generic-A
VirusBuster	Found  nothing
VBA32	Found Downloader.Zlob.6, MalwareScope.Trojan.DnsChange.2, MalwareScope.Trojan.DnsChange.3 (probable variant)

冷冷

IK
I:\virus\样本区\gamecodec1000.rar:\gamecodec1000.exe - Signature 'Trojan.Win32.DNSChanger.arn' found
I:\virus\样本区\gamecodec1000.rar

        2 Files scanned
          (1 Archiv with 1 file)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.063

allinwonderi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-4-18, 6:52

Scan name: Virus Tester
Path to scan: C:\Documents and Settings\All Users\Documents\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-4-18, 13:20:48
---------------------------------------------------------------------
[Found Trojan]         <W32/Trojan2.AIES (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\gamecodec1000.rar->gamecodec1000.exe

---------------------------------------------------------------------
Scan ended:        2008-4-18, 13:20:49
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

BING126

McAfee  MISS

电影结束了

TF

zwl2828

The requested object is INFECTED with the following viruses: Trojan.Win32.DNSChanger.arn

Joker

C:\Documents and Settings\Administrator\桌面\gamecodec1000.rar>>gamecodec1000.exe        Trojan.DNSChanger.arn.ofjj.arc        木马        还未处理

kai604001987

楼主 在哪弄得那么多病毒啊 ？

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\GAMECODEC1000.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\NSZ3.TMP\DCRYPTDLL.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\NOTEPAD.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\CALC.EXE
4) C:\WINDOWS\SYSTEM32\KDCYX.EXE
5) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\FREEBSD.EXE
6) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\NSZ3.TMP\NSEXEC.DLL
7) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\LOCAL SETTINGS\TEMP\NSZ3.TMP\NS4.TMP
是否删除木马程序及其衍生物?

qigang

rising20.40.52未杀！