video.exe [md5:336f7b3]

显示全部楼层 · 发表于 2008-4-18 13:43:56

File:	video.exe
Status:	INFECTED/MALWARE
MD5:	336f7b3f3ffde88cae4f38b40bcbc799
Packers detected:	-
Bit9 reports:	Not analyzed yet (more info)

Scanner results
Scan taken on 18 Apr 2008 05:41:39 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found Worm.Warezov.Fb
Avast	Found nothing
AVG Antivirus	Found Downloader.Zlob.VYG
BitDefender	Found Trojan.Agent.AICP
ClamAV	Found Trojan.Agent-19323
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Downloader:W32/Tibs.TZ, Trojan.Win32.Agent.kgn
Fortinet	Found W32/Agent.KGN!tr
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Trojan.Win32.Agent.kgn
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/EncPk-CG
VirusBuster	Found nothing
VBA32	Found Trojan.Win32.Revelation

显示全部楼层 · 发表于 2008-4-18 13:47:27

IKARUS
I:\virus\样本区\video.rar:\video.exe - Signature 'Trojan.Win32.Revelation' found
I:\virus\样本区\video.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.000

显示全部楼层 · 发表于 2008-4-18 16:14:58

微点发现未知木马
程序:
E:\VIDEO.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\CBEVTSVC.EXE
是否删除木马程序及其衍生物?

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CBEVTSVC\ IMAGEPATH %SYSTEMROOT%\SYSTEM32\CBEVTSVC.EXE -K NETSVCS E:\VIDEO.EXE

显示全部楼层 · 发表于 2008-4-18 16:22:10

病毒: Trojan.Win32.Agent.kgn

显示全部楼层 · 发表于 2008-4-18 22:00:33

McAfee Tibs-Packed

显示全部楼层 · 发表于 2008-4-18 22:03:12

显示全部楼层 · 发表于 2008-4-18 22:07:10

rising20.40.42未杀！

显示全部楼层 · 发表于 2008-4-19 06:13:21

The requested object is INFECTED with the following viruses: Trojan.Win32.Agent.kgn

[病毒样本] video.exe [md5:336f7b3]

本帖子中包含更多资源

本帖子中包含更多资源

2/0

Kaspersky 2009