One

qigang

点击下载：http://85.255.120.10/gdnOT3256.exe

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Dialer.Win32.Gbdialer.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.32

aaad2008

Win32:Dialer-407 [Trj]

sbbdms

卡巴

已删除：色情软件 not-a-virus:Porn-Dialer.Win32.GBDialer.j        文件　: D:\软件\其它\v\k\gdnOT3256.rar/gdnOT3256.exe

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... 91&t=1212715908
Information:         Is the Trojan horse TR/Crypt.XPACK.Gen

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.51, VDF 7.0.4.150

残缺的唯美

2008-6-6        9:33:45        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\gdnOT3256.rar\GDNOT3256.EXE        Dialer-257(Dialer)

啊弥陀佛

啥都没做就退出

电影结束了

Submission Summary:

• Submission details:
  • Submission received: 6 June 2008, 12:34:05
  • Processing time: 3 min 52 sec
  • Submitted sample:
    • File MD5: 0x07BA16DA40D42939E82C0B8CC3E42A03
    • Filesize: 13,312 bytes
    • Alias: Trojan.GBDialer.C [PCTools], not-a-virus:Porn-Dialer.Win32.GBDialer.j [Kaspersky Lab], Dialer.DialPlatform [Symantec], Dialer-257 [McAfee]

• Summary of the findings:

What's been found	Severity Level
Contains characteristics of an identified security risk.

Technical Details:

Possible Security Risk

• Attention! The following threat category was identified:

Threat Category	Description
	A dialer that uses a modem to dial high-cost phone number(s)

File System Modifications

• The following file was created in the system:

#	Filename(s)	File Size	File MD5	Alias
1	[file and pathname of the sample #1]	13,312 bytes	0x07BA16DA40D42939E82C0B8CC3E42A03	Trojan.GBDialer.C [PCTools] not-a-virus:Porn-Dialer.Win32.GBDialer.j [Kaspersky Lab] Dialer.DialPlatform [Symantec] Dialer-257 [McAfee]

Memory Modifications

• There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	20,480 bytes

Other details

• To mark the presence in the system, the following Mutex object was created:
  • DIALER
• 不知道写得啥东西