x.exe [md5:62855b]

显示全部楼层 · 发表于 2008-4-26 10:40:02

File:	x.exe
Status:	INFECTED/MALWARE
MD5:	62855b3ddd8e11210916e50d6b62dc85
Packers detected:	PE_PATCH, UPACK
Bit9 reports:	File not found

Scanner results
Scan taken on 26 Apr 2008 02:38:17 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dropper.Gen
ArcaVir	Found Heur.Win32.I, Heur.RoundKick
Avast	Found Win32:Downloader-AOV
AVG Antivirus	Found nothing
BitDefender	Found Generic.Malware.P!Pk!g.28162012
ClamAV	Found PUA.Packed.UPack-2
CPsecure	Found nothing
Dr.Web	Found Trojan.MulDrop.14980
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Worm.Win32.Downloader.ix
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Worm.Win32.Downloader.ix
NOD32	Found nothing
Norman Virus Control	Found W32/Suspicious_U.gen
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-156, Mal/Packer
VirusBuster	Found nothing
VBA32	Found nothing

[ 本帖最后由 mofunzone 于 2008-4-25 18:41 编辑 ]

显示全部楼层 · 发表于 2008-4-26 10:42:37

在机房啥也干不了

显示全部楼层 · 发表于 2008-4-26 10:51:08

信息 2008-04-26  10:50:58 您此次查毒隔离了1个文件
信息 2008-04-26  10:50:58 您此次查毒共查出1个病毒以及危险代码
信息 2008-04-26  10:50:58 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个
信息 2008-04-26  10:50:58 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-26  10:50:58 D:\Desktop\x.exe Win32.Troj.DownLoaderT.hu.147456 隔离成功

显示全部楼层 · 发表于 2008-4-26 10:54:58

显示全部楼层 · 发表于 2008-4-26 11:14:03

Begin scan in 'F:\Virus\x.rar'
F:\Virus\x.rar
  [0] Archive type: RAR
--> x.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-26 11:45:10

[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\x.exe->(UPack)

显示全部楼层 · 发表于 2008-4-26 17:24:03

McAfee found nothing

显示全部楼层 · 发表于 2008-4-26 18:15:18

C:\Documents and Settings\Administrator\桌面\x.rar>>x.exe TrojanDownloader.Nurech.bd.bmqk 木马还未处理

显示全部楼层 · 发表于 2008-4-26 18:17:07

蠕虫名称:Worm.Win32.Downloader.abp

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\WAQO85F1\X[1].EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-4-26 20:21:13

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\x.rar<RAR>:x.exe<UPack>:x.exe <- Variant:Trojan.Agent.Fb : No action

Scanned objects : 3

Infected objects : 1

[病毒样本] x.exe [md5:62855b]

本帖子中包含更多资源

本帖子中包含更多资源