[病毒样本] 2

显示全部楼层 · 发表于 2008-8-6 17:59:21

下载地址：

http://195.225.176.25/hb/e40/40_1.exe
http://pornotube8.net/load.php?aff=5946&/HDVideodll_ver1.5946.0.exe

显示全部楼层 · 发表于 2008-8-6 18:11:35

Begin scan in 'C:\Users\TOSHIBA\Desktop\virus'
C:\Users\TOSHIBA\Desktop\virus\40_1.exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/BHO.fnd Trojan
[NOTE]    A backup was created as '48f878d7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年8月6日  18:10
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-8-6 18:12:00

40_1.exe Win32:Dropper-AVV [Trj]

显示全部楼层 · 发表于 2008-8-6 18:12:30

The file 'HDCodec_ver1.5946.0.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Zlob.jax. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-8-6 18:12:37

Begin scan in 'C:\Documents and Settings\Nerazzurri\桌面\virus.rar'
C:\Documents and Settings\Nerazzurri\桌面\virus.rar
[0] Archive type: RAR
   --> 40_1.exe
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/BHO.fnd Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-6 18:13:43

老地址。。。
让我知道又一家伙是天天更新的。。。

显示全部楼层 · 发表于 2008-8-6 18:14:58

金山 0

显示全部楼层 · 发表于 2008-8-6 19:24:24

McAfee 40_1.exe Adware-BHO.gen.b

显示全部楼层 · 发表于 2008-8-6 21:29:30

[Scanning : C:\Download Files]

C:\Download Files\virus.rar<RAR>:40_1.exe<DLLRES>:res0.exe <- Trojan.Bho.Fnd : No action
C:\Download Files\virus.rar<RAR>:40_1.exe<DLLRES>:res0.exe<UPX>:res0.exe <- Trojan.Bho.Fnd : No action

Scanned objects : 5

Infected objects : 2

显示全部楼层 · 发表于 2008-8-6 22:13:35

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
327813&k=f32a38ba41c9758b77bc9da2f90ebfa
6&t=1218031978

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan.Win32.BHO.fos

如有疑问，请联系您的技术支持
创建日期：
Wed Aug 06 22:16:48 2008
Kaspersky Lab

[病毒样本] 2

ArcaVir2008