-CHEAT-AV-4月30日-5.1篇(827楼过主流）

sam.to

153,154,157
to kl


8/4/2009 23:46:20        已偵測: Trojan-Downloader.Win32.FraudLoad.vnmy        C:\Documents and Settings\kato9096\桌面\msas2009pro.exe

[ 本帖最后由 sam.to 于 2009-4-8 23:47 编辑 ]

Sherry.ai

MD5:8ABB7C4E064D142922464CE04B0C2063

Sherry.ai

MD5:03241EF13E3B4CC264691DE922FD707F

Sherry.ai

MD5:C28854D50771A6E1E518AAA133BEE597

Sherry.ai

MD5:4F202431EB952174919ADE89C5ABF73D

Sherry.ai

MD5:DC7B52CC12B9EDBF6E08D0A2748C9C36

Sherry.ai

MD5:900CE986A9A2BD15BC9DD63182A5FD50

fatezero

2009/4/9 19:16:05        检测到威胁: HEUR:Trojan.Win32.Generic        E:\download\04384626.exe               

2009/4/9 19:16:12        检测到威胁: HEUR:Trojan.Win32.Generic        E:\download\wcenter.exe               

2009/4/9 19:16:14        检测到威胁: HEUR:Trojan.Win32.Generic        E:\download\malwaredef.exe

fatezero

File ID          Filename          Size (Byte)         Result
25317410          04384626.exe          376.55 KB          MALWARE
25317411          wcenter.exe          373 KB          MALWARE
25317412          malwaredef.exe          989.5 KB          MALWARE
25317407          N1.exe          10.61 MB          MALWARE
25317394          proas2009.exe          1.02 MB          MALWARE
25317399          proas2009-2.exe          1020.5 KB          MALWARE


Please find a detailed report concerning each individual sample below:
Filename         Result          04384626.exe          MALWARE

The file '04384626.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dropper.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename         Result          wcenter.exe          MALWARE

The file 'wcenter.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result          malwaredef.exe          MALWARE

The file 'malwaredef.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result          N1.exe          MALWARE

The file 'N1.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result          proas2009.exe          MALWARE

The file 'proas2009.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result          proas2009-2.exe          MALWARE

The file 'proas2009-2.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.

sam.to

162-167 to kl

thank for share



04384626.exe166 - Trojan-Downloader.Win32.FraudLoad.vpfe
wcenter.exe167 - Packed.Win32.Tdss.f

166,167

[ 本帖最后由 sam.to 于 2009-4-9 21:46 编辑 ]