继续FraudLoad

promised

只有国外主流报

a-squared	4.5.0.18	2009.06.29	-
AhnLab-V3	5.0.0.2	2009.06.29	-
AntiVir	7.9.0.199	2009.06.29	TR/Dldr.FraudLoad.evd.1
Antiy-AVL	2.0.3.1	2009.06.29	-
Authentium	5.1.2.4	2009.06.28	-
Avast	4.8.1335.0	2009.06.28	-
AVG	8.5.0.339	2009.06.29	-
BitDefender	7.2	2009.06.29	-
CAT-QuickHeal	10.00	2009.06.29	-
ClamAV	0.94.1	2009.06.29	-
Comodo	1485	2009.06.29	-
DrWeb	5.0.0.12182	2009.06.29	-
eSafe	7.0.17.0	2009.06.28	-
eTrust-Vet	31.6.6588	2009.06.29	-
F-Prot	4.4.4.56	2009.06.29	W32/SuspPack.S.gen!Eldorado
F-Secure	8.0.14470.0	2009.06.29	-
Fortinet	3.117.0.0	2009.06.29	-
GData	19	2009.06.29	-
Ikarus	T3.1.1.64.0	2009.06.29	Trojan-Dropper.Agent
Jiangmin	11.0.706	2009.06.29	-
K7AntiVirus	7.10.768	2009.06.19	-
Kaspersky	7.0.0.125	2009.06.29	Trojan-Downloader.Win32.FraudLoad.evd
McAfee	5660	2009.06.28	-
McAfee+Artemis	5660	2009.06.28	-
McAfee-GW-Edition	6.7.6	2009.06.29	Trojan.Dldr.FraudLoad.evd.1
Microsoft	1.4803	2009.06.29	-
NOD32	4195	2009.06.29	Win32/TrojanDownloader.FakeAlert.ACE
Norman	6.01.09	2009.06.26	-
nProtect	2009.1.8.0	2009.06.29	-
Panda	10.0.0.14	2009.06.29	-
PCTools	4.4.2.0	2009.06.28	-
Prevx	3.0	2009.06.29	-
Rising	21.36.02.00	2009.06.29	-
Sophos	4.43.0	2009.06.29	-
Sunbelt	3.2.1858.2	2009.06.28	-
Symantec	1.4.4.12	2009.06.29	Downloader.MisleadApp
TheHacker	6.3.4.3.356	2009.06.27	-
TrendMicro	8.950.0.1094	2009.06.29	-
VBA32	3.12.10.7	2009.06.29	-
ViRobot	2009.6.29.1810	2009.06.29	-
VirusBuster	4.6.5.0	2009.06.28	-

dreams521

kingmuro

已检测：木马程序 Trojan-Downloader.Win32.FraudLoad.evd        文件：D:\My Documents\桌面\test\streamviewer.40000\streamviewer.40000.exe

wptyh73hm

2009-6-29 20:02:55    创建文件    允许
进程: f:\program files\7-zip\7zfm.exe
目标: C:\Documents and Settings\Administrator\Local Settings\Temp\7zOF1.tmp\streamviewer.40000.exe
规则: [文件组]所有执行文件 -> [文件]*; *.exe

2009-6-29 20:02:58    创建新进程    允许
进程: f:\program files\7-zip\7zfm.exe
目标: c:\documents and settings\administrator\local settings\temp\7zof1.tmp\streamviewer.40000.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\7zOF1.tmp\streamviewer.40000.exe"
规则: [应用程序]*

2009-6-29 20:03:02    访问网络    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zof1.tmp\streamviewer.40000.exe
目标: TCP [本机 : 1595] ->  [216.240.146.119 : 80 (http)]
规则: [网络]任意协议 [本机 : 任意端口] <-> [任意地址 : 任意端口]

2009-6-29 20:03:04    访问网络    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zof1.tmp\streamviewer.40000.exe
目标: TCP [本机 : 1596] ->  [66.199.229.229 : 80 (http)]
规则: [网络]任意协议 [本机 : 任意端口] <-> [任意地址 : 任意端口]

2009-6-29 20:03:09    访问网络    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zof1.tmp\streamviewer.40000.exe
目标: TCP [本机 : 1597] ->  [64.27.5.202 : 80 (http)]
规则: [网络]任意协议 [本机 : 任意端口] <-> [任意地址 : 任意端口]

2009-6-29 20:03:11    创建文件    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zof1.tmp\streamviewer.40000.exe
目标: C:\Documents and Settings\Administrator\Local Settings\Temp\a..bat
规则: [文件组]所有执行文件 -> [文件]*; *.bat

2009-6-29 20:03:16    删除文件    允许
进程: f:\program files\7-zip\7zfm.exe
目标: C:\Documents and Settings\Administrator\Local Settings\Temp\7zOF1.tmp\streamviewer.40000.exe
规则: [文件组]所有执行文件 -> [文件]*; *.exe

kkgh

费尔  TrojanDownloader.FraudLoad.evd.oeue

悠柚

ik kill的话，a2也杀[:26:]

xyao

TF+微点

浪人哭泣

瑞星2010没有反应

BING126

to McAfee

江湖的fans

瑞星 主防K