xoomvip.exe [md5:e7b5ef]

显示全部楼层 · 发表于 2008-4-18 14:34:19

洗洗睡了

File:	xoomvip.exe
Status:	INFECTED/MALWARE
MD5:	e7b5effee0e291ce556c74520c3eb228
Packers detected:	UPACK
Bit9 reports:	File not found

Scanner results
Scan taken on 18 Apr 2008 06:32:35 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dldr.Delphi.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found BehavesLike:Win32.Malware (probable variant)
ClamAV	Found PUA.Packed.UPack
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found Possibly a new variant of W32/CrazyCrunch-based!Maximus
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan-Dropper.Win32.Agent.ane
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found W32/Suspicious_U.gen
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/DelpDldr-D
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-4-18 14:44:06

EAV 无视！

显示全部楼层 · 发表于 2008-4-18 15:50:57

微点砍掉

显示全部楼层 · 发表于 2008-4-18 16:03:38

打开这个http://www.parperfeito.com.br/

里面什么鸟语啊。

显示全部楼层 · 发表于 2008-4-18 16:23:16

病毒： BehavesLike:Win32.Malware (引擎B)

显示全部楼层 · 发表于 2008-4-18 16:41:45

程序:
E:\XOOMVIP.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\E8QTZLOS\MONITORA4[1].JPG
2) C:\WINDOWS\SYSTEM32\SERVICE\SERVICES.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-4-18 18:25:06

赛门铁克SEP直接扫描不报

显示全部楼层 · 发表于 2008-4-18 18:31:32

TF。。。

显示全部楼层 · 发表于 2008-4-18 19:19:52

自动下载软件：W32/Banload.B.gen!Eldorado (not disinfectable

显示全部楼层 · 发表于 2008-4-18 19:27:24

The requested object is INFECTED with the following viruses: Heur.Trojan.Generic

[病毒样本] xoomvip.exe [md5:e7b5ef]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

Kaspersky 2009