1x

尤金卡巴斯基

leonfg

C:\Documents and Settings\GUNDAM\桌面\SYSTEM.rar » RAR » SYSTEM.DLL - a variant of Win32/TrojanDownloader.Agent.OMQ trojan

JIANGMIN
\\?\c:\documents and settings\administrator\桌面\system\system.dll     trojan/killav.uk     2008-12-5 1:57:21     已删除

[ 本帖最后由 leonfg 于 2008-12-5 02:00 编辑 ]

saga3721

木马名称:Trojan.Win32.KillAV.amh

'TR/Killav.ayx.13' [trojan]

西风萧雨

lmsa613

gomu887

结果: 发现 1 个恶意软件
Trojan.Win32.KillAV.ayx (病毒)
C:\Documents and Settings\Administrator\桌面\SYSTEM.rar\SYSTEM.DLL

hzyw

wangfeng66

文件 SYSTEM.rar 接收于 2008.11.29 15:12:54 (CET)
当前状态: 完成

结果: 20/37 (54.05%)
格式化文本 打印结果  
反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.11.28.2 2008.11.28 -
AntiVir 7.9.0.36 2008.11.28 -
Authentium 5.1.0.4 2008.11.28 W32/Heuristic-KPP!Eldorado
Avast 4.8.1281.0 2008.11.28 Win32:Warezov-MF
AVG 8.0.0.199 2008.11.29 Agent_r.GI
BitDefender 7.2 2008.11.29 Generic.Malware.P!dldg.5832866B
CAT-QuickHeal 10.00 2008.11.29 -
ClamAV 0.94.1 2008.11.29 Exploit.MS08-067
DrWeb 4.44.0.09170 2008.11.29 DLOADER.Trojan
eSafe 7.0.17.0 2008.11.27 Suspicious File
eTrust-Vet 31.6.6234 2008.11.28 -
Ewido 4.0 2008.11.29 -
F-Prot 4.4.4.56 2008.11.28 W32/Heuristic-KPP!Eldorado
F-Secure 8.0.14332.0 2008.11.29 -
Fortinet 3.117.0.0 2008.11.29 -
GData 19 2008.11.29 Generic.Malware.P!dldg.5832866B
Ikarus T3.1.1.45.0 2008.11.29 Trojan.Win32.AgentBypass
K7AntiVirus 7.10.538 2008.11.29 -
Kaspersky 7.0.0.125 2008.11.29 Trojan.Win32.KillAV.ayx
McAfee 5448 2008.11.28 -
McAfee+Artemis 5448 2008.11.28 Generic!Artemis
Microsoft 1.4104 2008.11.29 Trojan:Win32/AgentBypass.gen!I
NOD32 3650 2008.11.28 a variant of Win32/TrojanDownloader.Agent.OMQ
Norman 5.80.02 2008.11.28 -
Panda 9.0.0.4 2008.11.29 Suspicious file
PCTools 4.4.2.0 2008.11.29 -
Prevx1 V2 2008.11.29 -
Rising 21.05.52.00 2008.11.29 Trojan.Win32.KillAV.aug
SecureWeb-Gateway 6.7.6 2008.11.28 -
Sophos 4.36.0 2008.11.29 Mal/Emogen-Y
Sunbelt 3.1.1832.2 2008.11.27 Trojan.Win32.Startpage
Symantec 10 2008.11.29 Trojan.KillAV
TheHacker 6.3.1.1.166 2008.11.28 -
TrendMicro 8.700.0.1004 2008.11.28 PAK_Generic.001
VBA32 3.12.8.9 2008.11.28 -
ViRobot 2008.11.29.1492 2008.11.29 -
VirusBuster 4.5.11.0 2008.11.28 -
附加信息
File size: 26296 bytes
MD5...: 6ff4110ffd55a2c668ad6b8d38ddd6eb
SHA1..: 4f9a0e3176b3efe1a65cf9c18d6626e9f385bff4
SHA256: 65476adb9907b873a2f7664e25a460fe1ecc2ec545b94441184581cee46e1dcb
SHA512: aa670cd6e85c704e4d6f7955379e91575b74856a71af69088cff3e3b226f464c
22abd14ca8f5098ae3504792a843fa23ad07d28a9d10c77a55f2f2016fdb97c3

ssdeep: 768:vMOtGZ45kgriDuDwoDX/EsQB9ibUQ6qpGrVEd+X:1EZ4m1DUwCX/iShp0Gd+
X

PEiD..: -
TrID..: File type identification
RAR Archive (83.3%)
REALbasic Project (16.6%)
PEInfo: -


基本全杀..

yybcym

小红伞不让下载

allinwonderi

[Scanning : C:\TMP]


C:\TMP\SYSTEM.rar<RAR>:SYSTEM.DLL <- Trojan.Killav.Ayx : No action
C:\TMP\SYSTEM.rar<RAR>:SYSTEM.DLL<DLLRES>:res0.exe <- Trojan.Rootkit.Agent.Fcy : No action
C:\TMP\SYSTEM.rar<RAR>:SYSTEM.DLL<DLLRES>:res2.exe <- Trojan.Rootkit.Agent.Fec : No action
C:\TMP\SYSTEM.rar<RAR>:SYSTEM.DLL<DLLRES>:res3.exe <- Trojan.Rootkit.Agent.Feb : No action