Test Sample（3）

显示全部楼层 · 发表于 2008-8-3 17:53:40

地址：http://mspublik.com/exe.php?type=dll&ex=6154

显示全部楼层 · 发表于 2008-8-3 17:56:42

1217757009.dll Generic PUP.x (可能有害的程序)

显示全部楼层 · 发表于 2008-8-3 17:58:58

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1217757009.rar'
C:\Documents and Settings\Administrator\桌面\1217757009.rar
[0] Archive type: RAR
--> 1217757009.dll
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2008-8-3 18:12:17

对象: 1217757009.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\1217757009.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.E404.bi (KAV 引擎), Trojan.Dropper.RZP (BD 引擎)

显示全部楼层 · 发表于 2008-8-3 18:54:52

风险程序 2008-08-03 18:54:07 C:\Documents and Settings\Administrator\桌面\1217757009.rar\1217757009.dll Win32.Adware.E404.bi.32768 跳过，未处理

显示全部楼层 · 发表于 2008-8-3 20:16:40

显示全部楼层 · 发表于 2008-8-3 20:17:06

[Scanning : C:\Download Files]

C:\Download Files\1217757009.rar<RAR>:1217757009.dll<PECompact2>:1217757009.dll <- Adware.E404.bi : No action

Scanned objects : 3

Infected objects : 1

显示全部楼层 · 发表于 2008-8-3 20:17:36

<W32/Heuristic-XEN!Eldorado (not disinfectable)> C:\Download Files\1217757009.rar->1217757009.dll->xorPE->(XORCrypt)

显示全部楼层 · 发表于 2008-8-3 23:39:05

检测到：广告程序 not-a-virus:AdWare.Win32.E404.bi URL: http://bbs.kafan.cn/attachment.p ... ecBundle//PECompact

显示全部楼层 · 发表于 2008-8-4 00:00:40

C:\Documents and Settings\Administrator\桌面\1217757009\1217757009.dll - 已感染 Trojan.MulDrop.16876

[病毒样本] Test Sample（3）

Norman Virus Control 5.99

ArcaVir2008

F-Prot 4.4.4