kk.exe

Palkia

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.3	20090814223255	2009-08-14	-	0.796
AntiVir	8.2.1.1	7.1.5.115	2009-08-14	-	0.359
Arcavir	2009	200908131337	2009-08-13	-	0.036
Authentium	5.1.1	200908131840	2009-08-13	-	1.255
AVAST!	4.7.4	090813-0	2009-08-13	-	0.014
AVG	8.5.288	270.13.56/2302	2009-08-14	-	0.390
BitDefender	7.81008.3855147	7.27155	2009-08-14	-	3.514
CA (VET)	9.0.0.143	31.6.6676	2009-08-14	-	3.824
ClamAV	0.95.2	9695	2009-08-14	-	0.054
Comodo	3.10	1976	2009-08-14	-	1.617
CP Secure	1.1.0.715	2009.08.14	2009-08-14	-	12.614
Dr.Web	4.44.0.9170	2009.08.14	2009-08-14	-	5.120
F-Prot	4.4.4.56	20090813	2009-08-13	-	1.455
F-Secure	7.02.73807	2009.08.14.07	2009-08-14	Trojan-Downloader:W32/Renos.gen!C [FSE]	0.174
GData	19.7127/19.438	20090814	2009-08-14	-	4.626
Ikarus	T3.1.01.64	2009.08.14.73238	2009-08-14	-	3.910
Microsoft	1.4903	2009.08.14	2009-08-14	-	5.916
Norman	6.01.09	6.01.00	2009-08-13	-	4.009
nProtect	20090814.01	5009831	2009-08-14	-	9.808
Quick Heal	10.00	2009.08.13	2009-08-13	-	1.179
Sophos	2.89.1	4.44	2009-08-14	Mal/EncPk-HW	3.058
Sunbelt	5330	5330	2009-08-13	-	2.239
The Hacker	6.3.4.3	v00383	2009-08-12	-	0.742
VBA32	3.12.10.9	20090813.1326	2009-08-13	-	2.141
ViRobot	20090814	2009.08.14	2009-08-14	-	0.431
VirusBuster	4.5.11.10	10.112.4/1818927	2009-08-13	-	2.363
卡巴斯基	5.5.10	2009.08.14	2009-08-14	-	0.057
安博士V3	2009.08.14.06	2009.08.14	2009-08-14	-	0.918
安天	2.0.18	20090814.2703881	2009-08-14	-	0.119
江民杀毒	11.0.800	2009.08.14	2009-08-14	-	5.008
熊猫卫士	9.05.01	2009.08.13	2009-08-13	-	2.241
瑞星	20.0	21.42.44.00	2009-08-14	Packer.Win32.Agent.aq [Suspicious]	0.970
赛门铁克	1.3.0.24	20090813.022	2009-08-13	-	0.063
趋势科技	8.700-1004	6.364.04	2009-08-14	-	0.032
迈克菲	5.3.00	5708	2009-08-13	-	3.555
金山毒霸	2009.2.5.15	2009.8.14.18	2009-08-14	-	0.561
飞塔	2.81-3.120	10.714	2009-08-14	-	0.244

[ 本帖最后由 Palkia 于 2009-8-14 22:48 编辑 ]

尤金卡巴斯基

To KL

z2665

mfcs miss，to

ll47548205

2009-08-14 22:53:30    创建文件      操作:阻止
进程路径:D:\kk.exe
文件路径:C:\WINDOWS\system32\msxml71.dll
触发规则:所有程序规则->系统关键位置规则->%WinDir%\*.dll


2009-08-14 22:53:30    创建文件      操作:阻止
进程路径:D:\kk.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\msxml71.dll
触发规则:所有程序规则->Temp文件夹规则->?:\Documents and Settings\*\Local Settings\Temp\*.dll

sam.to

TO LL

linjw

The file 'kk.exe' has been determined to be 'UNDER ANALYSIS'.

尤金卡巴斯基

Hello,


kk.exe - Trojan-Dropper.Win32.FrauDrop.gi

At the moment this file is detected. Please update your antivirus bases.


Regards, Vitaly Yakutenko
Virus analyst, Kaspersky Lab.

sam.to

17/8/2009 11:27:38        已偵測: Trojan-Dropper.Win32.FrauDrop.gi        C:\Documents and Settings\kato9096\桌面\kk.rar/kk.exe

黑衣~魂

DRWEB
URL is blocked. Malicious program is detected
Malicious program detected
Trojan.HohoSpy

鱼是一只我

大蜘蛛 D:\Users\china\AppData\Local\Temp\Rar$VR00.134\kk.rar\kk.exe - 已感染 Trojan.HohoSpy