setup.exe [md5:ac44f98]

显示全部楼层 · 发表于 2008-5-24 14:00:46

File:	setup.exe
Status:	INFECTED/MALWARE
MD5:	ac44f9857af97a7e539886c8869a982f
Packers detected:	-

Scanner results
Scan taken on 24 May 2008 05:59:43 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dldr.Zlob.Gen
ArcaVir	Found nothing
Avast	Found Win32:Zlob-CBY
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found Troj.Downloader.W32.Zlob.cbx
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-24 14:02:11

RS20.45.50未杀！

显示全部楼层 · 发表于 2008-5-24 14:03:06

可疑，不过应该是吧...

显示全部楼层 · 发表于 2008-5-24 14:15:09

生产一个bat 自我删除。

这东西能检测沙盘？？？

显示全部楼层 · 发表于 2008-5-24 14:46:10

Kaspersky miss
TO KL

显示全部楼层 · 发表于 2008-5-24 14:51:09

微点
D:\DOWNLOADS\SETUP.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:2022
远端地址:69.50.164.54(美国)
远端端口:80

程序:
D:\DOWNLOADS\SETUP.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\RCLQQIVG\1014[1].EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\KMQ0.EXE
3) C:\WINDOWS\SYSTEM32\KDDFS.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-5-24 18:24:00

卡巴未回信，但更新后已能杀出Trojan-Downloader.Win32,Zlob.nvz

显示全部楼层 · 发表于 2008-5-24 20:00:12

McAfee MISS

显示全部楼层 · 发表于 2008-5-24 20:10:38

金山毒霸 0

显示全部楼层 · 发表于 2008-5-24 20:29:50

原帖由 sbbdms 于 2008-5-24 14:46 发表
Kaspersky miss
TO KL

等

[病毒样本] setup.exe [md5:ac44f98]

本帖子中包含更多资源

2/0

本帖子中包含更多资源

浏览过的版块