install.jpg [md5:bc1a50]

显示全部楼层 · 发表于 2008-5-25 09:39:19

吃晚饭去，回来开发zlob，swizzor和banker结束，vundo我努力看看能不能找到吧
主要是因为vundo就是安广告，本体难以捕捉

File:	install.jpg
Status:	INFECTED/MALWARE
MD5:	bc1a508ea3814d9cdcdc1174560724d3
Packers detected:	-

Scanner results
Scan taken on 25 May 2008 01:35:22 (GMT)
A-Squared	Found nothing
AntiVir	Found DR/Spy.Banker.ndn
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found SHeur.BLJY
BitDefender	Found Trojan.Dropper.RYX
ClamAV	Found PUA.Packed.Themida
CPsecure	Found Troj.Spy.W32.Banker.ndn
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Spy.Win32.Banker.ndn
Fortinet	Found Spy/Banker
Ikarus	Found Backdoor.Win32.Delf.sy
Kaspersky Anti-Virus	Found Trojan-Spy.Win32.Banker.ndn
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Sus/ComPack (probable variant)
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-25 09:43:23

TF继续过
对象: install.jpg
路径: F:
Status: 已发现病毒
病毒: Trojan.Dropper.RYX (BD 引擎)

显示全部楼层 · 发表于 2008-5-25 09:44:25

金山毒霸 0

显示全部楼层 · 发表于 2008-5-25 17:45:50

rs 0

显示全部楼层 · 发表于 2008-5-25 19:24:10

RS20.45.62未杀！

显示全部楼层 · 发表于 2008-5-25 19:27:01

MISS

显示全部楼层 · 发表于 2008-5-25 19:39:42

McAfee MISS

[病毒样本] install.jpg [md5:bc1a50]