MD5:60c9784eef0fdf0b3631c8cd7c87b1cd

显示全部楼层 · 发表于 2008-5-25 05:28:46

A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found BackDoor.Generic9.APKV
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan-Spy.Win32.Ardamax.e
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-25 05:50:28

只有联网一个动作？
附下载物（Detected: not-a-virus:AdWare.Win32.Virtumonde.trm）

[ 本帖最后由 zwl2828 于 2008-5-25 06:02 编辑 ]

显示全部楼层 · 发表于 2008-5-25 07:37:59

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\file.rar'
C:\Documents and Settings\morgan\My Documents\
  file.rar
[0] Archive type: RAR
--> file.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trm
   [WARNING] The file was ignored!
  file.rar:Zone.Identifier

显示全部楼层 · 发表于 2008-5-25 07:39:44

A-Squared	Found nothing
AntiVir	Found ADSPY/Virtumonde.trm
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found SHeur.BLZT
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan.Win32.Vundo.H
Kaspersky Anti-Virus	Found not-a-virus:AdWare.Win32.Virtumonde.trm
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-25 07:42:50

原帖由 zwl2828 于 2008-5-25 05:50 发表
只有联网一个动作？
附下载物（Detected: not-a-virus:AdWare.Win32.Virtumonde.trm）

还有这个。过一片
http://bbs.kafan.cn/viewthread.php?tid=257051&extra=page%3D1

显示全部楼层 · 发表于 2008-5-25 08:06:40

在system32下生成mljdutut.dll 并调用

在windows下生产 MSupdate.exe

在temp下生产自毁bat 和

file[1].exe 并利用file[1].exe 调用mljdutut.dll

显示全部楼层 · 发表于 2008-5-25 08:21:02

update.zip 240.28/240.28KB 100.00% 在线扫描没有发现病毒，但这并不能说明此文件百分之百可信。2008-5-25 8:20:17 2008-5-25 8:20:29

file.rar 84.62/84.62KB 100.00% 在线扫描它是一个“间谍程序”2008-5-25 8:20:51 2008-5-25 8:21:09

显示全部楼层 · 发表于 2008-5-25 09:33:32

金山毒霸 0

显示全部楼层 · 发表于 2008-5-25 09:41:27

显示全部楼层 · 发表于 2008-5-25 14:19:20

Kaspersky miss
TO KL

卡巴：Trojan-Downloader.Win32.AutoIt.gl

[ 本帖最后由 sbbdms 于 2008-5-30 23:12 编辑 ]

[病毒样本] MD5:60c9784eef0fdf0b3631c8cd7c87b1cd

本帖子中包含更多资源

本帖子中包含更多资源

评分

回复 2楼 zwl2828 的帖子

本帖子中包含更多资源