all.exe [md5:c7f00ca]

显示全部楼层 · 发表于 2008-5-13 10:21:04

File:	all.exe
Status:	INFECTED/MALWARE
MD5:	c7f00ca1ab53e0006bbe8e5a394db43e
Packers detected:	-
Bit9 reports:

Scanner results
Scan taken on 13 May 2008 02:19:16 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/EncPk-DB
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-13 10:45:57

IK
I:\virus\样本区\all.rar:\all.exe - Suspect code-parts found (Level: 25)
I:\virus\样本区\all.rar

2 Files scanned
(1 Archiv with 1 file)
0 Signatures found
1 Suspect code-part found
Used time: 0:00.766

显示全部楼层 · 发表于 2008-5-13 11:56:54

金山 0

沙盘下体是不是有效 win32

显示全部楼层 · 发表于 2008-5-13 14:05:32

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.765\ALL.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-5-13 14:18:43

to KL,AntiVir

显示全部楼层 · 发表于 2008-5-13 15:00:41

The file 'all.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.Papras.DO. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-5-13 17:37:09

Hello,

all.exe_ - Trojan-PSW.Win32.Papras.do

This file is already detected. Please update your antivirus bases.

all.exe2 MALWARE

The file 'all.exe2' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.Papras.DO. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 kato9096 于 2008-5-13 17:44 编辑 ]

显示全部楼层 · 发表于 2008-5-13 17:56:05

all.rar 26.79/26.79KB 100.00% 在线扫描它是一个“密码窃取者”2008-5-13 17:55:23 2008-5-13 17:55:36

Twister在线扫描报的很明确～

显示全部楼层 · 发表于 2008-5-13 20:33:20

McAfee MISS

显示全部楼层 · 发表于 2008-5-13 20:35:22

RS20.44.12未杀！

[病毒样本] all.exe [md5:c7f00ca]

本帖子中包含更多资源

2/0