e.exe样本

cchao21

hxxp://s11.uwb4.com/1/ex.exe  

密码：virus

sam.to

url to kl
Trojan.Win32.AntiAV.bdp
http://www.virustotal.com/analis ... 209ebc07d1ba5178b03

[ 本帖最后由 sam.to 于 2009-4-28 14:44 编辑 ]

HC303

红伞KILL
Virus or unwanted program 'TR/Killav.PN [trojan]'
detected in file 'G:\virus\e\e.exe.
Action performed: Delete file

sam.to

过eset,有沒有人上报??

The EQs

eset下次升级增加特征码

cchao21

VirSCAN.org Scanned Report :
Scanned time : 2009/04/28 14:38:31 (CST)
Scanner results: 32%的杀软(12/38)报告发现病毒
File Name : e.exe
File Size : 43016 byte
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5 : c05b3a1dd1663290b4fdb3415e60a314
SHA1 : 5971c1192192b346de0c88bff7e32a6c4e9ae25b
Online report : http://virscan.org/report/f7578573217c4345408bc00784697946.html

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 4.0.0.32 20090428043149 2009-04-28 10.37 Trojan.Win32.AntiAV!IK
安博士V3 2009.04.28.01 2009.04.28 2009-04-28 3.09 -
AntiVir 7.9.0.156 7.1.3.118 2009-04-27 2.01 TR/Killav.PN
安天 2.0.18 20090427.2320212 2009-04-27 0.12 -
Arcavir 2009 200904271228 2009-04-27 0.11 -
Authentium 5.1.1 200904271910 2009-04-27 1.16 W32/Heuristic-400!Eldorado (Heuristic)
AVAST! 3.0.1 090427-0 2009-04-27 0.94 -
AVG 7.5.52.442 270.12.5/2083 2009-04-27 2.12 -
BitDefender 7.81008.2850457 7.25055 2009-04-28 2.78 -
CA (VET) 9.0.0.143 31.6.6475 2009-04-27 3.84 -
ClamAV 0.95 9296 2009-04-28 0.03 -
Comodo 3.8 1138 2009-04-27 1.79 -
CP Secure 1.1.0.715 2009.04.28 2009-04-28 8.72 -
Dr.Web 4.44.0.9170 2009.04.28 2009-04-28 4.46 -
F-Prot 4.4.4.56 20090427 2009-04-27 1.15 Possible W32/Heuristic-400!Eldorado (not disinfectable)
F-Secure 5.51.6100 2009.04.28.01 2009-04-28 5.48 -
飞塔 2.81-3.117 10.329 2009-04-27 0.51 -
GData 19.4900/19.312 20090428 2009-04-28 7.19 Trojan.Win32.AntiAV.bdp [Engine:A]
ViRobot 20090427 2009.04.27 2009-04-27 0.93 -
Ikarus T3.1.01.49 2009.04.28.72643 2009-04-28 2.76 Trojan.Win32.AntiAV
江民杀毒 11.0.706 2009.04.28 2009-04-28 6.32 TrojanDownloader.Agent.bebh
卡巴斯基 5.5.10 2009.04.28 2009-04-28 0.05 Trojan.Win32.AntiAV.bdp
金山毒霸 2009.2.5.15 2009.4.28.7 2009-04-28 0.64 -
迈克菲 5.3.00 5598 2009-04-27 2.88 Generic Dropper.q
Microsoft 1.4602 2009.04.28 2009-04-28 15.41 Trojan:Win32/Dogrobot.F
mks_vir 2.01 2009.04.28 2009-04-28 2.84 -
Norman 6.00.06 6.00.00 2009-04-27 10.01 -
熊猫卫士 9.05.01 2009.04.27 2009-04-27 40.13 -
趋势科技 8.700-1004 5.990.02 2009-04-27 0.14 Possible_Mlwr-13
Quick Heal 10.00 2009.04.25 2009-04-25 7.56 -
瑞星 20.0 21.27.10.00 2009-04-28 3.24 -
Sophos 2.85.0 4.40 2009-04-28 2.45 Mal/PWS-Fam
Sunbelt 5111 5111 2009-04-24 14.38 -
赛门铁克 1.3.0.24 20090427.002 2009-04-27 0.51 -
nProtect 20090427.02 3502298 2009-04-27 13.17 -
The Hacker 6.3.4.1 v00315 2009-04-27 1.19 -
VBA32 3.12.10.3 20090427.1914 2009-04-27 2.91 -
VirusBuster 4.5.11.10 10.105.8/1307123 2009-04-27 1.84 -

tangxingyong

红伞KILL
Virus or unwanted program 'TR/Killav.PN [trojan]'
detected in file 'G:\virus\e\e.exe.
Action performed: Delete file

einnawy

过nis

黑衣~魂

TO DW

328397663

原帖由 sam.to 于 2009-4-28 14:42 发表
url to kl
Trojan.Win32.AntiAV.bdp
http://www.virustotal.com/analisis/d92a5e29848a1209ebc07d1ba5178b03

Hello,this domain will be added to the blacklist soon.Thanks!