-CHEAT-AV-4月30日-5.1篇(827楼过主流）

显示全部楼层 · 发表于 2009-5-15 21:47:24

486 to kl

显示全部楼层 · 发表于 2009-5-15 22:47:33

Install_2010.exe_ - Trojan-Downloader.Win32.FraudLoad.ekk

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

pav.exe_ - not-a-virus:FraudTool.Win32.PersonalAntivirus.t

New potentially risk software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

显示全部楼层 · 发表于 2009-5-16 00:19:27

G DATA 杀3个

显示全部楼层 · 发表于 2009-5-16 19:15:53

12X

http://www.namipan.com/d/c3308db ... 09b84889efe79ab2601

显示全部楼层 · 发表于 2009-5-16 22:50:56

494 to kl

显示全部楼层 · 发表于 2009-5-16 22:56:53

494
D:\TDDownload\TD FAKE 12X\AV FIX.exe 已检测: Downloader.FakeAlert!IK
D:\TDDownload\TD FAKE 12X\install.exe/pc.exe 已检测: Riskware.FraudTool.Win32.PrivacyCenter!IK
D:\TDDownload\TD FAKE 12X\install.exe/agent.exe 已检测: Virus.Win32.Trojan!IK
D:\TDDownload\TD FAKE 12X\install.exe/guide.html 已检测: Riskware.FraudTool.Win32.PrivacyCenter!IK
D:\TDDownload\TD FAKE 12X\install.exe/gimg1.jpg 已检测: Generic.Win32.Malware!IK
D:\TDDownload\TD FAKE 12X\install.exe/gimg2.jpg 已检测: Generic.Win32.Malware!IK
D:\TDDownload\TD FAKE 12X\install.exe/sp.dat 已检测: Fraudtool.Win32.PrivacyCenter!IK
D:\TDDownload\TD FAKE 12X\Install_2009.exe 已检测: Trojan.Win32.FakeXPA!IK
D:\TDDownload\TD FAKE 12X\PC.exe 已检测: Riskware.FraudTool.Win32.XLGuarder!IK
D:\TDDownload\TD FAKE 12X\Pro Antispyware 2009.exe 已检测: Trojan.Win32.WinSpywareProtect!IK
D:\TDDownload\TD FAKE 12X\System scurity.exe 已检测: Trojan.Win32.Winwebsec!IK
D:\TDDownload\TD FAKE 12X\System scurity.exe 已检测: Trojan.Win32.Winwebsec!IK

显示全部楼层 · 发表于 2009-5-16 22:58:01

****************** Sophos Anti-Virus 日志记录 - 2009/5/16 14:57:50 **************

...
20090516 145714 文件"D:\TDDownload\TD FAKE 12X\AV FIX.exe"属于病毒/间谍软件 'Troj/FakeAv-QI'。
...
20090516 145719 在 'D:\TDDownload\TD FAKE 12X\install.exe\FILE:0004' 中检测到病毒/间谍软件 'Troj/PrvCnt-Gen' 。
20090516 145719 在 'D:\TDDownload\TD FAKE 12X\install.exe\FILE:0005' 中检测到病毒/间谍软件 'Troj/PrvCnt-Gen' 。
20090516 145719 在 'D:\TDDownload\TD FAKE 12X\install.exe\FILE:000d' 中检测到病毒/间谍软件 'Troj/FakeAle-MO' 。
...
20090516 145720 文件"D:\TDDownload\TD FAKE 12X\PC.exe"属于病毒/间谍软件 'Troj/Fakevir-MG'。
...
20090516 145720 文件"D:\TDDownload\TD FAKE 12X\personal av.exe"属于病毒/间谍软件 'Mal/FakeAV-AS'。
...
(7 个项目)

显示全部楼层 · 发表于 2009-5-16 22:58:43

红伞清扫战场
Starting the file scan:

Begin scan in 'D:\TDDownload\TD FAKE 12X\ErrorClear.exe'
Begin scan in 'D:\TDDownload\TD FAKE 12X\IAPro.exe'
Begin scan in 'D:\TDDownload\TD FAKE 12X\Install_2009.exe'
Begin scan in 'D:\TDDownload\TD FAKE 12X\pav.exe'
D:\TDDownload\TD FAKE 12X\Install_2009.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
Begin scan in 'D:\TDDownload\TD FAKE 12X\Pro Antispyware 2009.exe'
Begin scan in 'D:\TDDownload\TD FAKE 12X\RegTool.exe'
Begin scan in 'D:\TDDownload\TD FAKE 12X\System  scurity.exe'
D:\TDDownload\TD FAKE 12X\System  scurity.exe
Begin scan in 'D:\TDDownload\TD FAKE 12X\System scurity.exe'
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
D:\TDDownload\TD FAKE 12X\System scurity.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan

Beginning disinfection:
D:\TDDownload\TD FAKE 12X\Install_2009.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[WARNING] The file was ignored!
D:\TDDownload\TD FAKE 12X\System  scurity.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[WARNING] The file was ignored!
D:\TDDownload\TD FAKE 12X\System scurity.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[WARNING] The file was ignored!

End of the scan: 2009年5月16日  22:58
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   8 Files were scanned
   3 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   0 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   0 Archives were scanned
   3 Warnings
   0 Notes

显示全部楼层 · 发表于 2009-5-16 23:41:15

Hello,

IAPro.exe - not-a-virus:FraudTool.Win32.InternetAntivirus.bp

New potentially risk software was found in this file. It's detection will be included in the next update. Thank you for your help.

pav.exe - Trojan.Win32.FraudPack.mrf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Pro Antispyware 2009.exe

This file is corrupted.
这真的是损坏

494,其中一部分

[ 本帖最后由 sam.to 于 2009-5-16 23:44 编辑 ]

显示全部楼层 · 发表于 2009-5-17 08:01:35

to js

[病毒样本] -CHEAT-AV-4月30日-5.1篇(827楼过主流）

回复 495楼 sam.to 的帖子