2x

jimmyleo

fzz8848

File ID	Filename	Size (Byte)	Result
25192264	default.exe	2 KB	MALWARE
25193763	pass.exe	19.82 KB	MALWARE

[ 本帖最后由 fzz8848 于 2008-11-21 16:38 编辑 ]

tanlimo

http://195.2.252.138/t/in.bin

2008-11-21 11:39:46        文件系统实时防护        文件        D:\DOCUME~1\user\LOCALS~1\Temp\0000708d\in.bin        可能是 Win32/Nuwar 蠕虫 的变种

order110

小红伞干掉了

欠妳緈諨

S:\Handle\default.exe - 特征码 'Win32.SuspectCrc' 被发现
S:\Handle\pass.exe - 特征码 'BehavesLikeWin32.Malware' 被发现

        2 文件被扫描
          (0 压缩档 0 文件)
        2 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.000

windsea19

金山0

kingmuro

过诺顿10.1版本

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\default.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 8E0F2F3ECB2BCC8A3886FB3D6776BA0F

A-squared ----- Win32.SuspectCrc!IK
Avast -----Nothing
Avg -----Nothing
AntiVir ----- TR/Agent.2048.7
BitDefender ----- Generic.Malware.dld!!.66886FD0
ClaimWin -----Nothing
Dr.Web ----- DLOADER.Trojan
Eset -----Nothing
Ikarus ----- Win32.SuspectCrc
Jiangmin -----Nothing
Kaspersky ----- Trojan-Downloader.Win32.Agent.aptt
Kingsoft -----Nothing
Vba32 ----- Win32.Trojan.Downloader

*** 7/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\in.bin
Type: Generic Win/DOS Executable / Extension: .EXE
MD5 Hash: F78609B4FAC601B3315EABE3FCFCF470

A-squared -----Nothing
Avast ----- Win32:Rootkit-gen [Rtk]
Avg ----- Win32/Heur  
AntiVir ----- TR/Spy.ZBot.A.1
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset -----Nothing
Ikarus -----Nothing
Jiangmin -----Nothing
Kaspersky ----- Trojan-Spy.Win32.Zbot.a
Kingsoft -----Nothing
Vba32 -----Nothing

*** 4/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\pass.exe
Type: Win64 Executable Generic / Extension: .EXE
MD5 Hash: 1B1C231DE0B26C9C29FE7DAF143383A2

A-squared ----- BehavesLikeWin32.Malware!IK
Avast -----Nothing
Avg -----Nothing
AntiVir -----Nothing
BitDefender ----- BehavesLike:Win32.Malware
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset -----Nothing
Ikarus ----- BehavesLikeWin32.Malware
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft -----Nothing
Vba32 -----Nothing

*** 3/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2008/11/21 五 12:54:19.43
Note: The results might be different from that of the GUI version.

卢颖昱

卡巴8.0不杀pass.exe..

a369258147

过微点