b.exe

显示全部楼层 · 发表于 2009-8-13 23:18:30

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.3	20090813160201	2009-08-13	-	1.055
AntiVir	8.2.1.1	7.1.5.107	2009-08-13	TR/Fakealert.144384	0.524
Arcavir	2009	200908121839	2009-08-12	-	0.066
Authentium	5.1.1	200908131109	2009-08-13	-	1.755
AVAST!	4.7.4	090812-0	2009-08-12	-	0.232
AVG	8.5.288	270.13.54/2300	2009-08-13	-	0.566
BitDefender	7.81008.3836011	7.27143	2009-08-13	-	3.373
CA (VET)	9.0.0.143	31.6.6673	2009-08-13	-	18.606
ClamAV	0.95.2	9689	2009-08-13	-	0.035
Comodo	3.10	1966	2009-08-13	Heur.Packed.Unknown	2.584
CP Secure	1.1.0.715	2009.08.13	2009-08-13	-	22.927
Dr.Web	4.44.0.9170	2009.08.13	2009-08-13	-	8.712
F-Prot	4.4.4.56	20090813	2009-08-13	-	2.675
F-Secure	7.02.73807	2009.08.13.10	2009-08-13	Trojan-Downloader:W32/Renos.gen!C [FSE]	8.845
GData	19.7092/19.437	20090813	2009-08-13	-	4.910
Ikarus	T3.1.01.64	2009.08.13.73232	2009-08-13	-	6.713
Microsoft	1.4903	2009.08.12	2009-08-12	TrojanDownloader:Win32/Renos.JI	7.044
Norman	6.01.09	6.01.00	2009-08-12	-	8.024
nProtect	20090812.02	4997778	2009-08-12	-	7.365
Quick Heal	10.00	2009.08.13	2009-08-13	-	1.752
Sophos	2.89.1	4.44	2009-08-13	Mal/EncPk-JD	3.339
Sunbelt	5327	5327	2009-08-12	-	1.541
The Hacker	6.3.4.3	v00383	2009-08-12	-	0.789
VBA32	3.12.10.9	20090812.1653	2009-08-12	-	1.927
ViRobot	20090813	2009.08.13	2009-08-13	-	0.475
VirusBuster	4.5.11.10	10.112.3/1827400	2009-08-12	-	2.311
卡巴斯基	5.5.10	2009.08.13	2009-08-13	-	0.071
安博士V3	2009.08.13.03	2009.08.13	2009-08-13	-	1.328
安天	2.0.18	20090813.2698352	2009-08-13	-	0.177
江民杀毒	11.0.800	2009.08.13	2009-08-13	-	6.231
熊猫卫士	9.05.01	2009.08.13	2009-08-13	-	4.496
瑞星	20.0	21.42.34.00	2009-08-13	Packer.Win32.Agent.aq [Suspicious]	1.936
赛门铁克	1.3.0.24	20090812.008	2009-08-12	-	0.053
趋势科技	8.700-1004	6.361.00	2009-08-13	-	0.039
迈克菲	5.3.00	5707	2009-08-12	-	5.955
金山毒霸	2009.2.5.15	2009.8.13.21	2009-08-13	-	0.764
飞塔	2.81-3.120	10.712	2009-08-13	-	0.411

显示全部楼层 · 发表于 2009-8-13 23:21:40

To KL

显示全部楼层 · 发表于 2009-8-13 23:24:00

filseclab kill.

显示全部楼层 · 发表于 2009-8-13 23:35:46

Hello,

b.exe - Trojan.Win32.FraudPack.qfl

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Regards, Vitaly Yakutenko
Virus analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2009-8-13 23:36:15

在system32文件夹创建文件，修改注册表等行为

显示全部楼层 · 发表于 2009-8-13 23:49:16

to ll

显示全部楼层 · 发表于 2009-8-14 02:17:34

NOD32 kill
b.exe - Win32/Kryptik.ADX

[病毒样本] b.exe

本帖子中包含更多资源

本帖子中包含更多资源