waigua.exe

Palkia

Antivirus	Version	Last Update	Result
a-squared	4.5.0.18	2009.06.25	Trojan-Spy.Win32.Montp.y!IK
AhnLab-V3	5.0.0.2	2009.06.24	Dropper/Agent.938033
AntiVir	7.9.0.196	2009.06.24	-
Antiy-AVL	2.0.3.1	2009.06.24	-
Authentium	5.1.2.4	2009.06.24	-
Avast	4.8.1335.0	2009.06.24	Win32:Trojan-gen {Other}
AVG	8.5.0.339	2009.06.24	Dropper.Agent.MPW
BitDefender	7.2	2009.06.25	-
CAT-QuickHeal	10.00	2009.06.22	-
ClamAV	0.94.1	2009.06.25	-
Comodo	1405	2009.06.24	-
DrWeb	5.0.0.12182	2009.06.24	Trojan.MulDrop.origin
eSafe	7.0.17.0	2009.06.24	-
eTrust-Vet	31.6.6577	2009.06.24	-
F-Prot	4.4.4.56	2009.06.24	-
F-Secure	8.0.14470.0	2009.06.25	-
Fortinet	3.117.0.0	2009.06.24	-
GData	19	2009.06.25	Win32:Trojan-gen {Other}
Ikarus	T3.1.1.59.0	2009.06.25	Trojan-Spy.Win32.Montp.y
Jiangmin	11.0.706	2009.06.24	-
K7AntiVirus	7.10.768	2009.06.19	-
Kaspersky	7.0.0.125	2009.06.25	-
McAfee	5656	2009.06.24	-
McAfee+Artemis	5656	2009.06.24	Artemis!ACF158DAFD26
McAfee-GW-Edition	6.7.6	2009.06.25	-
Microsoft	1.4803	2009.06.24	-
NOD32	4186	2009.06.24	-
Norman	6.01.09	2009.06.24	-
nProtect	2009.1.8.0	2009.06.24	-
Panda	10.0.0.16	2009.06.24	-
Prevx	3.0	2009.06.25	-
Rising	21.35.24.00	2009.06.24	-
Sophos	4.43.0	2009.06.24	-
Sunbelt	3.2.1858.2	2009.06.25	-
Symantec	1.4.4.12	2009.06.25	-
TheHacker	6.3.4.3.353	2009.06.24	Trojan/Dropper.Agent.alxy
TrendMicro	8.950.0.1094	2009.06.24	-
VBA32	3.12.10.7	2009.06.25	Trojan-Dropper.Win32.Agent.alxy
ViRobot	2009.6.24.1802	2009.06.24	-
VirusBuster	4.6.5.0	2009.06.24	-

幸福的猪猪

to kaba avira kill！


Hello,


waigua.exe_ - Trojan-Dropper.Win32.Agent.auoz

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 幸福的猪猪 于 2009-6-25 08:52 编辑 ]

HC303

G:\virus\waigua.rar/waigua.exe         detected: Trojan-Spy.Win32.Montp.y!IK

haoge868

Ashampoo AntiVirus

xyao

TF+微点

04huang

类别: Password Stealer

说明: This program is dangerous and captures user passwords.

建议: Remove this software immediately.

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
file:C:\Program Files\WAIGUA\dxwg.exe->(UPX)

联机获取有关此项目的详细信息。

创建文件

创建的进程

注册表键值写入

微点av  kill

kkgh

费尔 Trojan.Cap952215.nldo

hj5abc

原帖由 haoge868 于 2009-6-25 10:00 发表
Ashampoo AntiVirus

Ashampoo的红伞引擎竟然报了。。  

红伞只报了一点生成物。

The file 'E:\Sandbox\Administrator\Pegasus\drive\C\WINDOWS\system32\comres.dll'
contained a virus or unwanted program 'TR/Crypt.ULPM.Gen' [trojan]
Action(s) taken:
The file was ignored!

The file 'E:\Sandbox\Administrator\Pegasus\drive\C\WINDOWS\system32\EN7hzSreCat8.dll'
contained a virus or unwanted program 'TR/Crypt.ULPM.Gen' [trojan]
Action(s) taken:
The file was ignored!

[ 本帖最后由 hj5abc 于 2009-6-25 13:38 编辑 ]

luxiao200888

那个看起来也是抱的生成物