init[1].exe [md5:ff1d16]

显示全部楼层 · 发表于 2008-5-10 03:59:03

File:	init[1].exe
Status:	INFECTED/MALWARE
MD5:	ff1d16180276042f535b9084299a1f56
Packers detected:	PE_PATCH.UPX, UPX
Bit9 reports:

Scanner results
Scan taken on 09 May 2008 19:56:18 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Zlob.EZ.1
ArcaVir	Found nothing
Avast	Found Win32:Small-AGK
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-116
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-10 09:43:21

金山 0

显示全部楼层 · 发表于 2008-5-10 09:56:45

avast!挺强的

显示全部楼层 · 发表于 2008-5-10 10:02:08

EAV 继续无视！

显示全部楼层 · 发表于 2008-5-10 10:21:29

Virus: Win32:Small-AGK [Trj]
File: init[1][1].rar
Directory: C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\YVU9IT8X
Process: IEXPLORE.EXE

显示全部楼层 · 发表于 2008-5-10 10:47:00

给出了报告的意思就是我们不用扫描了....

显示全部楼层 · 发表于 2008-5-10 10:51:00

哈哈，可能是误报吧。因为出来的都是几个误报大户

显示全部楼层 · 发表于 2008-5-10 10:55:28

真奇怪
无任何动作
http://research.sunbelt-software.com/ViewMalware.aspx?id=4340595
FFI1.4：
Unidentified Packer. *

000048AC 004116AC    0 XPTPSW
00004A52 00412052    0 LoadLibraryA
00004A60 00412060    0 GetProcAddress
00004A70 00412070    0 VirtualProtect
00004A80 00412080    0 VirtualAlloc
00004A8E 0041208E    0 VirtualFree
00004A9C 0041209C    0 ExitProcess

[ 本帖最后由 aarwwefdds 于 2008-5-10 10:58 编辑 ]

显示全部楼层 · 发表于 2008-5-10 15:15:10

上报卡巴

显示全部楼层 · 发表于 2008-5-10 19:29:37

TO ArcaVir , Grisoft , Frisk ,Vccn

[病毒样本] init[1].exe [md5:ff1d16]

本帖子中包含更多资源