cscript04.jpg [md5:aadae5]

mofunzone

antivir再度可耻的失败鸟

File:	cscript04.jpg
Status:	INFECTED/MALWARE
MD5:	aadae5eaf8e38c70f26fa1c02098671c
Packers detected:	PE_PATCH, TELOCK
Scanner results
Scan taken on 26 May 2008 23:39:26 (GMT)
A-Squared	Found  nothing
AntiVir	Found  nothing
ArcaVir	Found  nothing
Avast	Found Win32:Banker-DSI
AVG Antivirus	Found  nothing
BitDefender	Found Trojan.Spy.Agent.NPM
ClamAV	Found PUA.Packed.TeLock
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found Virus.Win32.VB.bb
Kaspersky Anti-Virus	Found Trojan-Spy.Win32.Banker.nlo
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found Mal/Banspy-I
VirusBuster	Found  nothing
VBA32	Found  nothing

挪威的冬天

金山毒霸 0

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... 76472f&t=1211851481
Information:         Contains suspicious code HEUR/Crypted.E

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.46, VDF 7.0.4.95
Sent

25029070

cscript04.jpg

774 KB

UNDER ANALYSIS

[ 本帖最后由 Kitman 于 2008-5-27 09:27 编辑 ]

电影结束了

很好。。。

居然有一个网络银行的网页。。。

Starting the file scan:

Begin scan in 'E:\AV\cscript04.rar'
E:\AV\cscript04.rar
  [0] Archive type: RAR
  --> cscript04.jpg
      [DETECTION] Is the Trojan horse TR/Spy.Banker.nlo.2
      [NOTE]      The file was deleted!

tracydk

to grisoft

红心王子

Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-5-27 14:58:59,TrojanSpy.Banker.nlo.rjnn,木马,Administrator,d:\我的文档\桌面\cscript04.rar>>cscript04.jpg,Manual scan

allinwonderi

TO

qigang

RS20.46.12未杀！

尤金卡巴斯基

已删除：木马程序 Trojan-Spy.Win32.Banker.nlo        文件　: G:\Temp\cscript04.rar/cscript04.jpg//PE_Patch//TeLock