lolipop.exe [md5:a035f0]

mofunzone

大功率棒棒糖，不发了，懒得找了，出去散散步，温哥华的夏天终于来了。。

File:	lolipop.exe
Status:	INFECTED/MALWARE
MD5:	a035f0ef557230ef90366538a347d00a
Packers detected:	-
Scanner results
Scan taken on 27 May 2008 23:15:16 (GMT)
A-Squared	Found  nothing
AntiVir	Found TR/Drop.VB.aqz
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found Trojan-Dropper.Win32.VB.aqz
Fortinet	Found  nothing
Ikarus	Found  nothing
Kaspersky Anti-Virus	Found Trojan-Dropper.Win32.VB.aqz
NOD32	Found  nothing
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Sophos Antivirus	Found  nothing
VirusBuster	Found  nothing
VBA32	Found  nothing

palfan

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.28.0	2008.05.27	-
AntiVir	7.8.0.19	2008.05.27	TR/Drop.VB.aqz
Authentium	5.1.0.4	2008.05.27	-
Avast	4.8.1195.0	2008.05.27	-
AVG	7.5.0.516	2008.05.27	-
BitDefender	7.2	2008.05.28	-
CAT-QuickHeal	9.50	2008.05.26	-
ClamAV	0.92.1	2008.05.27	-
DrWeb	4.44.0.09170	2008.05.27	-
eSafe	7.0.15.0	2008.05.27	-
eTrust-Vet	31.4.5828	2008.05.28	-
Ewido	4.0	2008.05.27	-
F-Prot	4.4.4.56	2008.05.27	-
F-Secure	6.70.13260.0	2008.05.27	Trojan-Dropper.Win32.VB.aqz
Fortinet	3.14.0.0	2008.05.27	-
GData	2.0.7306.1023	2008.05.27	Trojan-Dropper.Win32.VB.aqz
Ikarus	T3.1.1.26.0	2008.05.27	-
Kaspersky	7.0.0.125	2008.05.28	Trojan-Dropper.Win32.VB.aqz
McAfee	5304	2008.05.27	-
Microsoft	1.3520	2008.05.28	-
NOD32v2	3137	2008.05.28	-
Norman	5.80.02	2008.05.27	-
Panda	9.0.0.4	2008.05.27	Suspicious file
Prevx1	V2	2008.05.28	-
Rising	20.46.12.00	2008.05.27	-
Sophos	4.29.0	2008.05.27	-
Sunbelt	3.0.1123.1	2008.05.17	-
Symantec	10	2008.05.28	-
TheHacker	6.2.92.321	2008.05.27	-
VBA32	3.12.6.6	2008.05.28	-
VirusBuster	4.3.26:9	2008.05.27	-
Webwasher-Gateway	6.6.2	2008.05.28	Trojan.Drop.VB.aqz

可以认为除了卡巴和红伞，其他全都挂了

http://www.threatexpert.com/repo ... 0ef90366538a347d00a

palfan

盗取信息，修改系统文件，添加启动项，自动联网..............MS就是这样了

gaojun7206

lolipop.rar
    [0] Archive type: RAR
    --> lolipop.exe
        [DETECTION] Is the Trojan horse TR/Drop.VB.aqz
      [NOTE]      The file was moved to '48a8d09d.qua'!

电影结束了

晕。。。
我等了一分钟TF才反应。。。。

tracydk

Joker

原帖由 电影结束了 于 2008-5-28 14:44 发表


晕。。。
我等了一分钟TF才反应。。。。

原来要一分钟啊。。。我还以为这玩意沙盘运行不起来勒。

allinwonderi

MISS

BING126

McAfee  MISS