emtd.exe [md5:ad67c7]

mofunzone

File:	emtd.exe
Status:	OK
MD5:	ad67c76fa3d0045d1b498500a27b03f1
Packers detected:	-
Scanner results
Scan taken on 14 May 2008 23:44:25 (GMT)
A-Squared	Found  nothing
AntiVir	Found  nothing
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found  nothing
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found  nothing
VirusBuster	Found  nothing
VBA32	Found  nothing

挪威的冬天

金山毒霸 0

capsshift

运行了一下，没看出来要干什么。

sharkkong

Kaspersky
Internet Security 2009
Access denied
The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
263907&k=a372ce2881714977d0b9ae5106d03e4
f&t=1210815736

The following error was encountered:

The requested object is INFECTED with the following viruses: Heur.Trojan.Generic


Please contact your service provider if you consider it incorrect.
Generated:
Thu May 15 09:42:35 2008
Kaspersky Internet Security 2009

wangjay1980

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: emtd.rar
> Attachment: fvowketqtbs.rar
> Attachment: mpfanvqg.rar
> Attachment: oadkxrts.rar
> Attachment: pvnsmfor.rar
> Attachment: rqRKEVME.rar
> Attachment: setup_526_1_.rar
> Attachment: vbksrofa.rar

aaad2008

星星挂了

秋叶濛濛

avk dr.web 0

gaojun7206

运行后没任何动作。。。。。。。。。

Palkia

危险进程(PID:2176): C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.813\emtd.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

危险级别: 中
级别评分: 36.408880
状态: 进程已被结束，但还没有清除，等待进一步处理。

建议: 如果能确认这个文件是安全的可以信任它，如果能确认是不安全的可以删除它，如果是正常的程序被意外的终止，可以暂时信任然后再重新运行一次。

如果无法确认它是否安全，建议使用在线扫描得到进一步的建议。

The file 'emtd.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/Vapsup.WC. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.