fundo.jpg [md5:18892cf]

mofunzone

说真的，如果我乐意每日刷满一个版的卡饭太简单了。。
病毒到处都是。。
不过very bullshit的结果就不用说了

File:	fundo.jpg
Status:	INFECTED/MALWARE  (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5:	18892cf03e397432190bed8cf848d49b
Packers detected:	-
Scanner results
Scan taken on 25 May 2008 00:59:11 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Crypt.NSPM.Gen
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found Downloader.Generic7.OJZ
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.Dadobra.akt
Fortinet	Found W32/Generic.A!tr
Ikarus	Found Trojan.Crypt.NSPM
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.Dadobra.akt
NOD32	Found  nothing
Norman Virus Control	Found W32/Smalltroj.EJAW
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/EncPk-DM
VirusBuster	Found  nothing
VBA32	Found Trojan-Downloader.Win32.Dadobra.akt

Joker

那就刷吧

危险进程(PID:2500): C:\Documents and Settings\Administrator\桌面\fundo.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

危险级别: 中
级别评分: 46.18880
状态: 进程已被结束，但还没有清除，等待进一步处理。

建议: 如果能确认这个文件是安全的可以信任它，如果能确认是不安全的可以删除它，如果是正常的程序被意外的终止，可以暂时信任然后再重新运行一次。

如果无法确认它是否安全，建议使用在线扫描得到进一步的建议。

电影结束了

• The following files were created in the system:

#	Filename(s)	File Size	File MD5	Alias
1	[file and pathname of the sample #1]	76,678 bytes	0x18892CF03E397432190BED8CF848D49B	Infostealer.Bancos [Symantec] TROJ_Generic.A [Trend Micro]
2	%Windir%\winexec32.txt	0 bytes	0xD41D8CD98F00B204E9800998ECF8427E	(not available)
3	c:\winx.log	138 bytes	0x55CE55C10C0CB60721763D56D952FC3A	(not available)

Memory Modifications

• There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	290,816 bytes

• The following system services were modified:

Service Name	Display Name	New Status	Service Filename
ALG	Application Layer Gateway Service	"Stopped"	%System%\alg.exe
SharedAccess	Windows Firewall/Internet Connection Sharing (ICS)	"Stopped"	%System%\svchost.exe -k netsvcs

• Note:
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

[ 本帖最后由 电影结束了 于 2008-5-25 10:17 编辑 ]

挪威的冬天

金山毒霸 0

Palkia

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Packer.Win32.Mian007.a   

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.45.62

tracydk

AVG杀了

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Mian007.a   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.45.62

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\fundo.rar<RAR>:fundo.jpg <- Downloader.Dadobra.Ait : No action



Scanned objects : 2

Infected objects : 1

allinwonderi

MISS

BING126

McAfee  MISS