mdccasys32_080510.dll [md5:e2c6bc]

显示全部楼层 · 发表于 2008-5-11 15:53:14

File:	mdccasys32_080510.dll
Status:	INFECTED/MALWARE
MD5:	e2c6bc957559df4e91c2e81a6bc19be2
Packers detected:	-
Bit9 reports:

Scanner results
Scan taken on 11 May 2008 07:50:34 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Spy.Pophot.C (probable variant)
ClamAV	Found Adware.Baidu
CPsecure	Found W32.AutoRun.jl
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Spy.Win32.Pophot.avz
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Trojan-Spy.Win32.Pophot.avz
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-024
VirusBuster	Found nothing
VBA32	Found Backdoor.XiaoBird.5 (probable variant)

显示全部楼层 · 发表于 2008-5-11 16:15:46

kv 0

显示全部楼层 · 发表于 2008-5-11 16:25:00

2008-5-11 16:27:14 内核文件 'D:\firefox download\mdccasys32_080510.rar' 已发送到 ESET 进行分析。

显示全部楼层 · 发表于 2008-5-11 20:10:14

RS20.43.62未杀！

显示全部楼层 · 发表于 2008-5-11 20:36:57

McAfee MISS

显示全部楼层 · 发表于 2008-5-13 06:36:28

Starting the file scan:

Begin scan in 'E:\AV\mdccasys32_080510.rar'
E:\AV\mdccasys32_080510.rar
  [0] Archive type: RAR
  --> mdccasys32_080510.dll
   [DETECTION] Is the Trojan horse TR/Spy.Pophot.avz
   [NOTE]    The file was deleted!

[病毒样本] mdccasys32_080510.dll [md5:e2c6bc]

本帖子中包含更多资源

2/0