crack.exe [md5:241e109]

mofunzone

File:	crack.exe
Status:	INFECTED/MALWARE
MD5:	241e1095b8d6070720b73420e718c793
Packers detected:	PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT
Scanner results
Scan taken on 24 May 2008 01:50:02 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Crypt.PEC2X.Gen
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found Downloader.Dluca.2.H
BitDefender	Found Trojan.Peed.Gen
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found PECompact (probable variant)
Fortinet	Found  nothing
Ikarus	Found Trojan.Crypt.PEC2X
Kaspersky Anti-Virus	Found PECompact (probable variant)
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/EncPk-AX
VirusBuster	Found  nothing
VBA32	Found  nothing

红心王子

crack.rar           46.81/46.81KB       100.00%    在线扫描      它是一个“木马”    2008-5-24 9:55:55    2008-5-24 9:56:07

挪威的冬天

金山毒霸 0

qigang

RS20.45.50未杀！

sbbdms

卡巴：新威胁PECompact（修改），未入库
TO KL

sbbdms

卡巴未回信，但更新后已能杀出Trojan.Win32.Inject.cfq

风野胤

网监杀了

2008-5-24 19:14:53        HTTP filter        file        http://xianexs.mail.qq.com/cgi-b ... 32933bda20d54da5ee9        probably a variant of Win32/Statik application        connection terminated - quarantined        fengyeyin\Administrator        Threat was detected upon access to web by the application: D:\Program Files\Ad Muncher\AdMunch.exe.

BING126

McAfee   MISS

Nblock

程序:
E:\CRACK.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\GOS33.TMP
2) C:\WINDOWS\SYSTEM32\WINNJM32.DLL
是否删除木马程序及其衍生物?
2008-05-24 19:52:50 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\WINNJM32\ SHUTDOWN  EVTSHUTDOWN E:\CRACK.EXE
2008-05-24 19:52:50 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\WINNJM32\ STARTUP  EVTSTARTUP E:\CRACK.EXE
2008-05-24 19:52:48 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\WINNJM32\ DLLNAME  WINNJM32.DLL E:\CRACK.EXE