ieav.exe [md5:51206ad]

mofunzone

补上几个
                                                                                                                                                                                                                                                  

File:	ieav.exe
Status:	INFECTED/MALWARE
MD5:	51206ad40b1b16b37f4729ff62f9b0cc
Packers detected:	-
Scanner results
Scan taken on 26 May 2008 05:57:36 (GMT)
A-Squared	Found  nothing
AntiVir	Found ADSPY/AdSpy.Gen
ArcaVir	Found  nothing
Avast	Found Win32:Trojan-gen {Other}
AVG Antivirus	Found Fake_AntiSpyware.SC
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found not-a-virus:FraudTool.Win32.IeDefender.cs (6, 2, 616)
Fortinet	Found Misc/IeDefender
Ikarus	Found Generic.Win32.Malware.IEDefender
Kaspersky Anti-Virus	Found not-a-virus:FraudTool.Win32.IeDefender.cs
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found  nothing
VirusBuster	Found  nothing
VBA32	Found  nothing

saber123

Starting the file scan:
Begin scan in 'C:\Documents and Settings\jy\桌面\ieav.rar'

End of the scan: 2008年5月26日 星期一  14:36
Used time: 00:02 min
The scan has been done completely.
      0 Scanning directories
      3 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

gaojun7206

Test\
  ieav.rar
    [0] Archive type: RAR
    --> ieav.exe
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was moved to '489b5bcb.qua'!

happy567

这东西有点意思，表面上是正常程序（IE杀毒），要求安装，装好后还真像

接着点击 start scan

还真扫出不少“病毒”啊！！！完成后remove threats 出现

原来“清除危险”要购买“许可”，再点击purchase license时，被TF拦截

因为有事，没有继续往下测了。。。

[ 本帖最后由 happy567 于 2008-5-26 16:18 编辑 ]

细路(L)

DR.WEB经常无视楼LZ发得样本...

挪威的冬天

金山毒霸 0

tanlimo

这盾牌标志看得眼熟

allinwonderi

不错，Pass all .

qigang

RS20.46.02未杀！

尤金卡巴斯基

已删除：风险软件 not-a-virus:FraudTool.Win32.IeDefender.cs        文件　: G:\Temp\ieav.rar/ieav.exe//data0003