khfeDvvw.dll [md5:4ab2f6]

显示全部楼层 · 发表于 2008-5-11 04:15:11

请主意这个样本如果你的硬盘是ntfs的格式绝对不要解压出来，这个样本使用了ntfs acl，解压出来之后无法用正常途径删除
如果你无视了这条提示解压了出来，请使用最新的unlocker删除，或者想办法把文件移动到fat32分区上，就可以删除

File:	khfeDvvw.dll
Status:	OK
MD5:	4ab2f6513553a9f2221ef3a78e152b80
Packers detected:	-
Bit9 reports:

Scanner results
Scan taken on 10 May 2008 20:13:18 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-11 09:42:13

kv 0

显示全部楼层 · 发表于 2008-5-11 10:23:40

Kaspersky miss
TO KL

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: virus.rar

[ 本帖最后由 sbbdms 于 2008-5-11 12:18 编辑 ]

显示全部楼层 · 发表于 2008-5-11 11:20:56

金山 0

显示全部楼层 · 发表于 2008-5-11 20:42:59

RS20.43.62未杀！

显示全部楼层 · 发表于 2008-5-11 20:49:14

McAfee MISS

显示全部楼层 · 发表于 2008-5-11 22:07:53

显示全部楼层 · 发表于 2008-5-12 07:40:50

Starting the file scan:

Begin scan in 'E:\AV\khfeDvvw.rar'
E:\AV\khfeDvvw.rar
  [0] Archive type: RAR
  --> khfeDvvw.dll
   [DETECTION] Is the Trojan horse TR/Dldr.ConHook.OY
   [NOTE]    The file was deleted!

[病毒样本] khfeDvvw.dll [md5:4ab2f6]

本帖子中包含更多资源

2/0

本帖子中包含更多资源