fire-codec4192.exe [md5:b5d4f7e]

mofunzone

DNS changer过了antivir的基因了。。

File:	fire-codec4192.exe
Status:	INFECTED/MALWARE
MD5:	b5d4f7e1cd8a1be2155fbc3baeec0278
Packers detected:	-
Scanner results
Scan taken on 23 May 2008 01:00:31 (GMT)
A-Squared	Found  nothing
AntiVir	Found  nothing
ArcaVir	Found  nothing
Avast	Found Win32:Trojan-gen {Other}
AVG Antivirus	Found DNSChanger.AE
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found W32/DNSChanger.BA
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found Virus.Trojan.Win32.DNSChanger.chg
Kaspersky Anti-Virus	Found  nothing
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Troj/Zlobar-Fam
VirusBuster	Found  nothing
VBA32	Found  nothing

电影结束了

啊弥陀佛

微点砍掉

ranguangning

【看看吧，这种情况遇得多了】

ranguangning

【另外生成的notepad.exe】


【占用0字节】


【看窗口预览也不是啥好东西】

Palkia

kv 0

挪威的冬天

金山毒霸 0

allinwonderi

ArcaVir Found
[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\fire-codec4192.rar<RAR>:fire-codec4192.exe<NSIS>:dcryptdll.dll <- Trojan.Agent.Ki : No action



Scanned objects : 11

Infected objects : 1

allinwonderi

[Found Trojan]         <W32/DNSChanger.BA (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\fire-codec4192.rar->fire-codec4192.exe

---------------------------------------------------------------------
Scan ended:        2008-5-23, 19:49:36
Duration:        0:00:00

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

BING126

McAfee  MISS