1x

幸福的猪猪

实机运行，弹出一个找不到程序输入点的框框。（kaba开启交互模式下测试的）



把文件传到在线沙盘测试，结果，有生成物……


卡巴斯基的回信：


Hello,

1.exe_ - Backdoor.Win32.PcClient.apxr

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.



小红伞的回信：

The file '1.exe' has been determined to be 'MALWARE'.
Our analysts named the threat BDS/Pcclient.TCF.82. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.07.35. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

[ 本帖最后由 幸福的猪猪 于 2009-6-8 15:25 编辑 ]

HC303

启发
a virus or unwanted program 'HEUR/Crypted' [heuristic] was found.

kingsheet

卡巴不报

kingmuro

过avast4.8

kingmuro

瞬移加速.exe;C:\Documents and Settings\gxf\桌面\110\软件;Win32.HLLM.MyDoom.127

axishero

20090608 012645 文件"C:\Downloads\软件\瞬移加速.exe"属于病毒/间谍软件 'Mal/Packer'。
20090608 012645 读写扫描程序拒绝为用户 Home-PC\healthy 访问路径 "C:\Downloads\软件\瞬移加速.exe"。


另问沙盘地址？

[ 本帖最后由 axishero 于 2009-6-8 09:28 编辑 ]

lazena

a-squared Anti-Malware - 版本 4.5
上次更新: 2009/6/8 8:57:24

扫描设置:

Scan type: N/A
对象: D:\软件.rar
扫描文件: 开
启发式扫描: 关
ADS 扫描: 开

扫描开始于:        2009/6/8 9:24:55

D:\软件.rar/瞬移加速.exe         已检测: Backdoor.Win32.Popwin!IK

tun

在我虚拟机可以运行
Trend
Found [      Mal_MLWR-5](    1) in C:\Scan\瞬移加速.exe

Palkia

金山毒霸 0

BING126

McAfee BackDoor-CKB