gbppdist.js [md5:d5a554]

显示全部楼层 · 发表于 2008-5-28 06:52:07

俄罗斯太廉价

File:	gbppdist.js
Status:	INFECTED/MALWARE
MD5:	d5a554f931fce7ec98cf902c7188efe7
Packers detected:	-

Scanner results
Scan taken on 27 May 2008 22:49:59 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Spy.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan-Spy
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.Dadobra.alv
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Sus/Madcode-A (probable variant)
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-28 06:54:08

Time Module Event User
2008/5/28 6:53:52 Kernel The file 'G:\v\gbppdist.js' has been sent to ESET's labs for analysis.

显示全部楼层 · 发表于 2008-5-28 13:44:32

多引擎既然发现了就不测试了

显示全部楼层 · 发表于 2008-5-28 14:38:29

gbppdist.rar
[0] Archive type: RAR
--> gbppdist.js
[DETECTION] Is the Trojan horse TR/Spy.Gen
[NOTE] The file was moved to '48acfe43.qua'!

显示全部楼层 · 发表于 2008-5-28 18:09:40

to girsoft

显示全部楼层 · 发表于 2008-5-28 18:47:39

什么都没有吗

显示全部楼层 · 发表于 2008-5-28 19:46:35

MISS

显示全部楼层 · 发表于 2008-5-28 20:02:14

McAfee miss

显示全部楼层 · 发表于 2008-5-28 21:00:36

RS20.46.22未杀！

显示全部楼层 · 发表于 2008-5-29 23:54:01

卡巴斯基直接杀掉，大蜘蛛没报

[病毒样本] gbppdist.js [md5:d5a554]