vap.exe [md5:29a89e]

显示全部楼层 · 发表于 2008-5-26 03:26:48

File:	vap.exe
Status:	INFECTED/MALWARE
MD5:	29a89eb5654f6e3d6be7092e7baf8c32
Packers detected:	-

Scanner results
Scan taken on 25 May 2008 19:25:45 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found PSW.OnlineGames.BT
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found Troj.PSW.W32.OnLineGames.aito
Dr.Web	Found Trojan.MulDrop.16187
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-26 12:03:14

MISS

显示全部楼层 · 发表于 2008-5-26 12:05:00

TO KL

显示全部楼层 · 发表于 2008-5-26 12:36:55

rs 0

显示全部楼层 · 发表于 2008-5-26 12:37:41

金山毒霸 0

显示全部楼层 · 发表于 2008-5-26 13:29:39

微点砍掉

显示全部楼层 · 发表于 2008-5-26 14:45:04

Test\
  vap.rar
[0] Archive type: RAR
--> vap.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was moved to '48aa5cc9.qua'!

显示全部楼层 · 发表于 2008-5-26 15:12:01

没太明白那个sys是什么用处..............

显示全部楼层 · 发表于 2008-5-26 15:42:39

显示全部楼层 · 发表于 2008-5-26 15:43:49

已删除：病毒 Worm.Win32.AutoRun.dwh 文件: D:\Users\ztx\Desktop\vap.rar/vap.exe

[病毒样本] vap.exe [md5:29a89e]

本帖子中包含更多资源

ArcaVir2008, F-Prot 4.4.4

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块