dhcpsrv.exe [md5:fc48ed]

mofunzone

File:	dhcpsrv.exe
Status:	INFECTED/MALWARE
MD5:	fc48edad2b85b148813ca8e9a5b65e21
Packers detected:	-
Bit9 reports:
Scanner results
Scan taken on 13 May 2008 02:02:46 (GMT)
A-Squared	Found  nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found Generic.Malware.dld!!.6D88E55F
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found  nothing
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/Behav-112
VirusBuster	Found  nothing
VBA32	Found  nothing

The EQs

00000A54   00403054      0   http://206.53.51.32/in.cgi?14

挪威的冬天

金山 0

Palkia

危险进程(PID:1952): C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.281\dhcpsrv.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

危险级别: 中
级别评分: 40.c408880
状态: 进程已被结束，但还没有清除，等待进一步处理。

建议: 如果能确认这个文件是安全的可以信任它，如果能确认是不安全的可以删除它，如果是正常的程序被意外的终止，可以暂时信任然后再重新运行一次。

如果无法确认它是否安全，建议使用在线扫描得到进一步的建议。

sam.to

to kl

The file 'dhcpsrv.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.3072.152. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) starting with the next update. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

sam.to

原帖由 kato9096 于 2008-5-13 14:21 发表
to kl

dhcpsrv.exe_ - Trojan-Downloader.Win32.Tiny.awa,



dhcpsrv.exe2          MALWARE

The file 'dhcpsrv.exe2' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.3072.152. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) starting with the next update. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

红心王子

dhcpsrv.rar         1.38/1.38KB         100.00%    在线扫描      它是一个“间谍程序”2008-5-13 17:46:47   2008-5-13 17:47:10

qianwenxiang

redirected to : http://206.53.51.32/exit.exe

The file 'exit.exe' has been determined to be 'CLEAN'.