毒2

显示全部楼层 · 发表于 2008-7-8 23:39:58

Result: 1 malware found
Trojan-Downloader.Win32.Agent.gvq (virus)
D:\Users\ekincheng\Desktop\s1.rar\svchost.exe

显示全部楼层 · 发表于 2008-7-9 05:47:55

检测到：木马程序 Trojan-Downloader.Win32.Agent.gvq URL: http://bbs.kafan.cn/attachment.p ... chost.exe//PE_Patch

显示全部楼层 · 发表于 2008-7-9 09:35:22

反病毒引擎版本最后更新扫描结果
AhnLab-V3 2008.7.9.0 2008.07.08 -
AntiVir 7.8.0.64 2008.07.08 TR/Downloader.Gen
Authentium 5.1.0.4 2008.07.08 W32/Hupigon.G.gen!Eldorado
Avast 4.8.1195.0 2008.07.08 Win32:Virtualizer
AVG 7.5.0.516 2008.07.08 BackDoor.Bifrose.BT
BitDefender 7.2 2008.07.09 MemScan:Win32.Worm.Autorun.HB
CAT-QuickHeal 9.50 2008.07.08 TrojanDownloader.Agent.gvq
ClamAV 0.93.1 2008.07.09 -
DrWeb 4.44.0.09170 2008.07.08 DDoS.Rincux.137
eSafe 7.0.17.0 2008.07.08 Win32.Agent.gvq
eTrust-Vet 31.6.5937 2008.07.08 -
Ewido 4.0 2008.07.08 -
F-Prot 4.4.4.56 2008.07.08 W32/Hupigon.G.gen!Eldorado
F-Secure 7.60.13501.0 2008.07.08 Trojan-Downloader.Win32.Agent.gvq
Fortinet 3.14.0.0 2008.07.08 W32/Agent.GVQ!tr.dldr
GData 2.0.7306.1023 2008.07.09 Trojan-Downloader.Win32.Agent.gvq
Ikarus T3.1.1.26.0 2008.07.09 Trojan-Downloader.Win32.Agent.gvq
Kaspersky 7.0.0.125 2008.07.09 Trojan-Downloader.Win32.Agent.gvq
McAfee 5334 2008.07.08 -
Microsoft 1.3704 2008.07.09 -
NOD32v2 3252 2008.07.08 a variant of Win32/Small.NO
Norman 5.80.02 2008.07.08 W32/Agent.FTZT
Panda 9.0.0.4 2008.07.08 Suspicious file
Rising 20.52.12.00 2008.07.08 Worm.Win32.DownLoad.gf
Sophos 4.31.0 2008.07.09 -
Sunbelt 3.1.1509.1 2008.07.04 Trojan-Downloader.Win32.Agent.gvq
Symantec 10 2008.07.09 Trojan Horse
TheHacker 6.2.96.374 2008.07.07 -
TrendMicro 8.700.0.1004 2008.07.08 TROJ_DLOADER.YTZ
VBA32 3.12.6.8 2008.07.08 Trojan-Downloader.Win32.Agent.gvq
VirusBuster 4.5.11.0 2008.07.08 Trojan.DL.Agent.DCQM
Webwasher-Gateway 6.6.2 2008.07.08 Trojan.Downloader.Gen
附加信息
File size: 381045 bytes
MD5...: 985f912733ccb5bf7334bdddf1a6f5ac
SHA1..: f67bdf23a6eff0dea149ab7b0c3512ac8fb0f8ba
SHA256: 40e27a8b58b1ef10a72f7363ab4ef7da91982058bb919bf2f93f0d906c92f579
SHA512: 9389429378b6aabdceff9b8fd3d5064db9cec6a8ce8f58881a377205d3d76846
966aa6a58153cf473a84101038db3da48937ca103c428cff6458e2474c1fc8dc
PEiD..: -
PEInfo: -
packers (Avast): ASProtect
packers (Kaspersky): PE_Patch

显示全部楼层 · 发表于 2008-7-9 18:00:24

2008-7-9 17:59:40 F:\download\s1.rar/svchost.exe/PE_Patch Internet Explorer 已检测到: Trojan-Downloader.Win32.Agent.gvq
2008-7-9 17:59:40 F:\download\s1.rar/svchost.exe Internet Explorer 已删除: Trojan-Downloader.Win32.Agent.gvq
2008-7-9 17:59:40 F:\download\s1.rar Internet Explorer 处理错误: Trojan-Downloader.Win32.Agent.gvq
2008-7-9 17:59:40 F:\download\s1.rar Internet Explorer 未清除: Trojan-Downloader.Win32.Agent.gvq 写入错误
2008-7-9 17:59:40 F:\download\s1.rar Internet Explorer 未清除: Trojan-Downloader.Win32.Agent.gvq 由用户跳过

[病毒样本] 毒2