cartao.exe [md5:abc36bb]

显示全部楼层 · 发表于 2008-5-28 06:44:18

File:	cartao.exe
Status:	INFECTED/MALWARE
MD5:	abc36bbaa4391ad2f84ed7d3493cbca2
Packers detected:	-

Scanner results
Scan taken on 27 May 2008 22:39:52 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.CFI.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Spy.Agent.NSX
ClamAV	Found PUA.Packed.Themida
CPsecure	Found Troj.W32.Pakes
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found BehavesLikeWin32.ExplorerHijack
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Sus/ComPack (probable variant)
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-28 11:26:02

cartao.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
[NOTE] The file was moved to '48aed127.qua'!

显示全部楼层 · 发表于 2008-5-28 12:28:49

显示全部楼层 · 发表于 2008-5-28 13:02:30

行为好丰富

...............不过这个病毒体是不是也太大了点儿吧？

显示全部楼层 · 发表于 2008-5-28 14:35:46

显示全部楼层 · 发表于 2008-5-28 18:00:37

VT上的AVG不可信

显示全部楼层 · 发表于 2008-5-28 19:55:29

ArcaVir , FP也不可全信。

显示全部楼层 · 发表于 2008-5-28 19:58:24

McAfee PWS-Banker.gen.i

显示全部楼层 · 发表于 2008-5-28 21:05:16

RS20.46.22未杀！

[病毒样本] cartao.exe [md5:abc36bb]