免杀的PCshare

mkjkson

免杀的PCshare 过的杀毒还挺多····

挪威的冬天

金山毒霸 0

Starting the file scan:

Begin scan in 'E:\AV\木马.rar'
E:\AV\木马.rar
  [0] Archive type: RAR
  --> link.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The file was deleted!

mofunzone

很壮观，某世界第一被过了

File ID	Filename	Size (Byte)	Result
25029076	link.exe	59.33 KB	UNDER ANALYSIS

File:	link.exe
Status:	INFECTED/MALWARE
MD5:	c5a5675643886a73071839d39d56727c
Packers detected:	-
Scanner results
Scan taken on 26 May 2008 23:54:09 (GMT)
A-Squared	Found  nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found Trojan.Crypt.DG
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found  nothing
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found  nothing
VirusBuster	Found Backdoor.PcClient.Gen.3
VBA32	Found Malware.Agent.22 (paranoid heuristics) (probable variant)

gaojun7206

Test\
  ľ��.rar
    [0] Archive type: RAR
    --> link.exe
        [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The file was moved to '48395a65.qua'!

小小爬蔷虎

kis8.0.0.357    2008/05/27 4:05:00过

电影结束了

Backdoor.PcClient.Gen.3

happy567

被微点拦截

palfan

学校机房的破电脑运行该病毒出错.................

------------------------------------------

终于不出错了...........

生成随机六位英文dll，并添加mjtmkt服务加载

[ 本帖最后由 palfan 于 2008-5-27 11:22 编辑 ]

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: link.rar