[病毒样本] 2

显示全部楼层 · 发表于 2008-11-10 15:01:16

Begin scan in 'D:\Virus\s1.rar'
D:\Virus\s1.rar
[0] Archive type: RAR
--> psapi.dll
[DETECTION] Is the TR/Agent.38400 Trojan

显示全部楼层 · 发表于 2008-11-10 15:35:05

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\kavuninstall.exe
Type: Win32 Executable MS Visual C++ / Extension: .EXE
MD5 Hash: C688417E739B8AA8DCE0CEB9412A4722

A-squared ----- Trojan.Agent!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Generic8.QID
Antivir ----- Nothing
BitDefender ----- Nothing
ClamWin ----- Nothing
Dr.Web ----- Nothing
Eset ----- Nothing
Ikarus ----- Trojan.Agent
Jiangmin ----- Nothing
Kaspersky ----- Nothing
Kingsoft ----- Nothing
Vba32 ----- Nothing

*** 4/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\psapi.dll
Type: Win32 Executable MS Visual C++ / Extension: .EXE
MD5 Hash: 8EA7DC7E5830615077EFCC21696BAE02

A-squared ----- Nothing
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent.AIAJ
Antivir ----- TR/Agent.38400
BitDefender ----- Nothing
ClamWin ----- Nothing
Dr.Web ----- Nothing
Eset ----- Win32/Agent.OJG trojan
Ikarus ----- Nothing
Jiangmin ----- Nothing
Kaspersky ----- Nothing
Kingsoft ----- Win32.Troj.DropRootKit.a.38400
Vba32 ----- Win32.Agent.OJG

*** 6/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2008/11/10 һ 15:34:41.16

显示全部楼层 · 发表于 2008-11-10 15:56:51

The file 'kavuninstall.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content

显示全部楼层 · 发表于 2008-11-10 16:48:17

微点拦截

显示全部楼层 · 发表于 2008-11-10 20:07:40

[发现可能安全风险：] <W32/Heuristic-KPP!Eldorado (not disinfectable)> C:\Test\s1.rar->kavuninstall.exe

显示全部楼层 · 发表于 2008-11-10 20:08:14

显示全部楼层 · 发表于 2008-11-10 20:38:16

avast 拦截！

显示全部楼层 · 发表于 2008-11-10 20:44:44

McAfee 全灭。。

显示全部楼层 · 发表于 2008-11-10 21:08:57

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-10
F-Secure Hydra: 2.08.8110, 2008-11-10

W32/Malware (virus)
C:\DOCUMENTS AND SETTINGS\SK\桌面\VIRUSRUN\081110\S1\KAVUNINSTALL.EXE Action: quarantined

[病毒样本] 2

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4

Norman Virus Control 5.99

本帖子中包含更多资源