crack.exe [md5:0e6910]

mofunzone

File:	crack.exe
Status:	INFECTED/MALWARE
MD5:	0e69101aa27f5576b20e8630c6bfe6b5
Packers detected:	PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT
Scanner results
Scan taken on 17 May 2008 00:15:29 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Crypt.PEC2X.Gen
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found Generic10.YVW
BitDefender	Found Trojan.Mezzia.CY
ClamAV	Found  nothing
CPsecure	Found PECompact
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found PECompact (probable variant)
Fortinet	Found  nothing
Ikarus	Found Trojan.Crypt.PEC2X
Kaspersky Anti-Virus	Found PECompact (probable variant)
NOD32	Found  nothing
Norman Virus Control	Found Sandbox: W32/Malware;  [ General information ]         * **Locates window "NULL [class IEFrame]" on desktop.     * File length:        45523 bytes. [ Changes to filesystem ]     * Creates file C:\WINDOWS\TEMP\gos0899.tmp.     * Creates file C:\WINDOWS\TEMP\win8199.tmp. [ Changes to registry ]     * Accesses Registry key "HKLM\SOFTWARE\Microsoft\MSSMGR\".     * Accesses Registry key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\". [ Process/window information ]     * Creates a mutex 3024.     * Creates a mutex m3d5rt10.     * Modifies memory in process explorer.exe.     * Creates a thread in process explorer.exe.
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/EncPk-AX
VirusBuster	Found  nothing
VBA32	Found  nothing

啊弥陀佛

微点砍掉

sam.to

TO KL

sam.to

已隔離: 新的威脅 PECompact (修改)        檔案: C:\Documents and Settings\kato9096\桌面\517\複製 -crack.rar/crack.exe//PE_Patch.PECompact//PecBundle//PECompact

woai_jolin

Palkia

危险进程(PID:3692): C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.484\crack.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

危险级别: 中
级别评分: 36.408880
状态: 进程已被结束，但还没有清除，等待进一步处理。

建议: 如果能确认这个文件是安全的可以信任它，如果能确认是不安全的可以删除它，如果是正常的程序被意外的终止，可以暂时信任然后再重新运行一次。

如果无法确认它是否安全，建议使用在线扫描得到进一步的建议。


crack.exe           42.58/42.58KB       100.00%    在线扫描      它是一个“木马”    2008-5-17 13:15:42   2008-5-17 13:15:50

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\crack.rar<RAR>:crack.exe <- Variant:Downloader.Agent.Ahk : No action



Scanned objects : 4

Infected objects : 1

allinwonderi

FP6 miss.

BING126

McAfee  MISS

qigang

RS20.44.52未杀！