exrk.exe [md5:6c0223]

显示全部楼层 · 发表于 2008-5-17 08:42:28

File:	exrk.exe
Status:	POSSIBLY INFECTED/MALWARE(Note: this file was only flagged as malware by heuristic detection(s).This might be a false positive. Therefore, results of this scan willnot be stored in the database)
MD5:	6c0223cdf8f86713995264f072bb8cc3
Packers detected:	-

Scanner results
Scan taken on 17 May 2008 00:40:57 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Downloader.Zlob.8 (paranoid heuristics) (probable variant)

显示全部楼层 · 发表于 2008-5-17 11:52:13

弹出一个DOS窗口就没动作了

显示全部楼层 · 发表于 2008-5-17 12:06:24

TO KL

显示全部楼层 · 发表于 2008-5-17 12:07:19

什么反应都没有

显示全部楼层 · 发表于 2008-5-17 13:19:34

危险进程(PID:2192): C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX08.656\exrk.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

危险级别: 中
级别评分: 36.408880
状态: 进程已被结束，但还没有清除，等待进一步处理。

在线扫描发现它不是有害程序，但这并不能肯定此文件是百分之百安全的。你可以信任它，但如果你认为它是不可信的也可以删除它。

显示全部楼层 · 发表于 2008-5-17 14:13:40

卡巴7没有反应

显示全部楼层 · 发表于 2008-5-17 15:33:17

TO all

显示全部楼层 · 发表于 2008-5-17 16:28:33

Hello,

exrk.exe_ - Trojan.Win32.Vapsup.fgf,
oadkxrts.exe_ - Trojan.Win32.Vapsup.fgg,
pvnsmfor.dll - Trojan.Win32.Vapsup.fgh,
##MM.exe_ - Trojan.Win32.Inject.bzg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

kdkmn.exe_ - Trojan.Win32.DNSChanger.dcd,
setup_227_501.exe_ - Trojan-Downloader.Win32.Agent.pgs

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-5-17 18:48:58

想问下，这些样本怎么弄来的？

显示全部楼层 · 发表于 2008-5-17 20:30:18

McAfee MISS

[病毒样本] exrk.exe [md5:6c0223]

本帖子中包含更多资源

Kaspersky Lab