免杀的PCshare

显示全部楼层 · 发表于 2008-5-27 14:12:49

The file 'link.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.DG.19. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.96. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

显示全部楼层 · 发表于 2008-5-27 14:14:28

上报AVG

显示全部楼层 · 发表于 2008-5-27 14:55:27

SEP过

显示全部楼层 · 发表于 2008-5-27 15:12:05

Hi

thank you for your email. The file link.exe that you sent to us for analysis is a Trojan, Troj/Mdrop-BSP, further details of which can be found on our web site at

http://www.sophos.com/security/a ... e/trojmdropbsp.html

and an IDE file that will allow Sophos to detect this is now available on the Databank.

Please do not hesitate to contact me if I can be of any further assistance.

Regards,

Martin Elliott
Sophos Technical Support

显示全部楼层 · 发表于 2008-5-27 19:34:42

rs 0

显示全部楼层 · 发表于 2008-5-27 19:36:54

挺好的样本

显示全部楼层 · 发表于 2008-5-27 21:03:20

RS20.46.12未杀！

显示全部楼层 · 发表于 2008-5-27 21:26:29

已删除：木马程序 Backdoor.Win32.PcClient.don 文件　: G:\Temp\木马.rar/link.exe

显示全部楼层 · 发表于 2008-5-27 21:35:01

Dear Sir/Madam,

Thank you for your email.

Please let us inform you that the sample(s) you have sent us
consist(s) of new BackDoor variant(s).

The file will be detected in new virus definition update. Please make
sure that your AVG software is up to date.

Thank you for cooperation. It is appreciated.

Best regards,

Lubomir Latta
AVG Technical Support

website: http://www.grisoft.com
mailto: technicalsupport@grisoft.com

[ 本帖最后由 Exia 于 2008-5-27 21:46 编辑 ]

显示全部楼层 · 发表于 2008-5-27 21:42:57

TR/Crypt.DG.19

[病毒样本] 免杀的PCshare

Sophos

ArcaVir2008, F-Prot 4.4.4

2/0

AVG