file.exe MD5: 71c72

显示全部楼层 · 发表于 2009-5-8 17:56:00

File:	file.exe
Status:	INFECTED/MALWARE
MD5:	71c7265e9ae9791238cb9ad5075c5b86
Packers detected:	-

Scanner results
Scan taken on 08 May 2009 09:53:36 (GMT)
A-Squared	Found Trojan.Win32.Sudiet!IK
AntiVir	Found TR/Crypt.ZPACK.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Packed.Win32.Tdss.m
Ikarus	Found Trojan.Win32.Sudiet
Kaspersky Anti-Virus	Found Packed.Win32.Tdss.m
NOD32	Found a variant of Win32/Kryptik.OJ
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Quick Heal	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Malware-Cryptor.Win32.Tdss

显示全部楼层 · 发表于 2009-5-8 18:24:29

看到了刚让卡巴加通用检测的Packed.Win32.TDSS.m

显示全部楼层 · 发表于 2009-5-8 18:37:32

费尔Kill

显示全部楼层 · 发表于 2009-5-8 18:50:59

卡巴
检测到：木马程序 Packed.Win32.Tdss.m URL: http://bbs.kafan.cn/attachment.p ... 241779675//file.exe

显示全部楼层 · 发表于 2009-5-8 18:53:11

过kv2008

显示全部楼层 · 发表于 2009-5-8 18:59:35

运行了，没有动作？

郁闷~``````

显示全部楼层 · 发表于 2009-5-8 19:07:16

我记得会复制自身到一个TEMP文件夹还会释放一个病毒文件的…………

显示全部楼层 · 发表于 2009-5-8 20:20:47

McAfee miss

显示全部楼层 · 发表于 2009-5-9 00:02:13

To Symantec

显示全部楼层 · 发表于 2009-5-9 00:08:34

"E:\file.rar:\file.exe";"Trojan horse Generic13.AMIA";"Infected"

[病毒样本] file.exe MD5: 71c72