XPAinstall_880451.exe

Kitman

RT
The file 'XPAinstall_880451.exe' has been determined to be 'UNDER ANALYSIS'.

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.8.29.0	2008.08.29	-
AntiVir	7.8.1.23	2008.08.29	-
Authentium	5.1.0.4	2008.08.29	-
Avast	4.8.1195.0	2008.08.29	-
AVG	8.0.0.161	2008.08.29	-
BitDefender	7.2	2008.08.29	-
CAT-QuickHeal	9.50	2008.08.29	-
ClamAV	0.93.1	2008.08.29	-
DrWeb	4.44.0.09170	2008.08.29	-
eSafe	7.0.17.0	2008.08.28	-
eTrust-Vet	31.6.6055	2008.08.29	-
Ewido	4.0	2008.08.29	-
F-Prot	4.4.4.56	2008.08.29	-
F-Secure	7.60.13501.0	2008.08.29	-
Fortinet	3.14.0.0	2008.08.29	-
GData	19	2008.08.29	-
Ikarus	T3.1.1.34.0	2008.08.29	-
K7AntiVirus	7.10.432	2008.08.29	-
Kaspersky	7.0.0.125	2008.08.29	-
McAfee	5373	2008.08.29	-
Microsoft	1.3807	2008.08.25	-
NOD32v2	3399	2008.08.29	-
Norman	5.80.02	2008.08.29	-
Panda	9.0.0.4	2008.08.29	-
PCTools	4.4.2.0	2008.08.29	-
Prevx1	V2	2008.08.29	Fraudulent Security Program
Rising	20.59.41.00	2008.08.29	-
Sophos	4.33.0	2008.08.29	-
Sunbelt	3.1.1592.1	2008.08.29	-
Symantec	10	2008.08.29	-
TheHacker	6.3.0.6.067	2008.08.29	-
TrendMicro	8.700.0.1004	2008.08.29	Cryp_FakeAV
VBA32	3.12.8.4	2008.08.29	-
ViRobot	2008.8.29.1355	2008.08.29	-
VirusBuster	4.5.11.0	2008.08.29	-
Webwasher-Gateway	6.6.2	2008.08.29	-

[ 本帖最后由 Kitman 于 2008-8-30 01:40 编辑 ]

尤金卡巴斯基

To Kl

huangxinster

AntiVir miss

Palkia

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.FraudLoad.vblf        檔案: C:\Documents and Settings\kato9096\桌面\XPAinstall_880451.rar/XPAinstall_880451.exe

尤金卡巴斯基

Hello,

XPAinstall_880451.exe_ - Trojan-Downloader.Win32.FraudLoad.vblf

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Andrey Bezborodov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: XPAinstall_880451.rar

qigang

RS20.59.52未杀！

iCeSnaker

Symantec SEP11 miss

hum

Symantec
运行后样本试图 连接Xp antivirus的"官网”
被IPS拦截。。
随后没有相应了。