notepad.exe [md5:bc10c3d]

显示全部楼层 · 发表于 2008-5-24 14:34:12

我都怀疑渣滓的引擎坏了。。

File:	notepad.exe
Status:	INFECTED/MALWARE
MD5:	bc10c3d9fa73ff79801fc57f59062383
Packers detected:	-

Scanner results
Scan taken on 24 May 2008 06:32:40 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Crypt.BY
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Trojan.DownLoader.origin
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found Sandbox: W32/Malware; [ General information ] * File length: 17979 bytes. [ Process/window information ] * Creates process "svchost.exe". * Modifies memory in process svchost.exe. * Modifies execution flow of process svchost.exe.
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Emogen-Y
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-24 14:35:50

怎么和刚才那个一样？
木马名称:未知木马
程序:
D:\DOWNLOADS\NOTEPAD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-5-24 14:36:55

RS20.45.50未杀！

显示全部楼层 · 发表于 2008-5-24 14:41:26

卡巴：Heur.Trojan.Generic（修改），未入库
TO KL

显示全部楼层 · 发表于 2008-5-24 20:16:24

McAfee MISS

显示全部楼层 · 发表于 2008-5-24 20:19:43

现在开始鄙视杀软了。

显示全部楼层 · 发表于 2008-5-24 20:20:03

MISS

显示全部楼层 · 发表于 2008-5-24 20:27:14

原帖由 sbbdms 于 2008-5-24 14:41 发表
卡巴：Heur.Trojan.Generic（修改），未入库
TO KL

等你消息

显示全部楼层 · 发表于 2008-5-25 00:10:30

2003-05-24 00:09:14 应用程序保护(修改其它进程内存) 操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\notepad.exe
目标进程:C:\windows\system32\svchost.exe

2003-05-24 00:09:15 注册表保护(创建注册表值) 操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\notepad.exe
注册表路径:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager
注册表名称:PendingFileRenameOperations

显示全部楼层 · 发表于 2008-5-25 13:29:13

Hello,

notepad.exe_ - Trojan.Win32.DNSChanger.dlf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Mikhail Bulgakov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: notepad.rar

[病毒样本] notepad.exe [md5:bc10c3d]

本帖子中包含更多资源

2/0

ArcaVir2008, F-Prot 4.4.4

浏览过的版块