install.exe

Palkia

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.3	20090815000139	2009-08-15	Riskware.AdWare.Win32.AdMoke!IK	0.483
AntiVir	8.2.1.1	7.1.5.116	2009-08-14	HEUR/Malware	0.295
Arcavir	2009	200908131337	2009-08-13	-	0.248
Authentium	5.1.1	200908131840	2009-08-13	W32/SysVenFak.A.gen!Eldorado (Possible)	8.610
AVAST!	4.7.4	090813-0	2009-08-13	Win32:OnLineGames-BSI [Trj]	0.317
AVG	8.5.288	270.13.56/2302	2009-08-14	-	0.540
BitDefender	7.81008.3855147	7.27155	2009-08-14	-	3.389
CA (VET)	9.0.0.143	31.6.6676	2009-08-14	-	9.202
ClamAV	0.95.2	9696	2009-08-14	-	1.149
Comodo	3.10	1976	2009-08-14	-	1.225
CP Secure	1.1.0.715	2009.08.14	2009-08-14	-	12.357
Dr.Web	4.44.0.9170	2009.08.14	2009-08-14	DLOADER.Trojan	6.621
F-Prot	4.4.4.56	20090813	2009-08-13	W32/SysVenFak.A.gen!Eldorado (generic, not disinfectable)	8.023
F-Secure	7.02.73807	2009.08.14.10	2009-08-14	-	7.826
GData	19.7129/19.438	20090814	2009-08-14	-	4.579
Ikarus	T3.1.01.64	2009.08.14.73238	2009-08-14	not-a-virus:AdWare.Win32.AdMoke	4.181
Microsoft	1.4903	2009.08.14	2009-08-14	-	5.803
Norman	6.01.09	6.01.00	2009-08-13	-	4.016
nProtect	20090814.01	5009831	2009-08-14	-	7.052
Quick Heal	10.00	2009.08.13	2009-08-13	-	1.781
Sophos	2.89.1	4.44	2009-08-14	Mal/Behav-053	3.497
Sunbelt	5330	5330	2009-08-13	Trojan-PSW.Win32.QQPass.up	2.261
The Hacker	6.3.4.3	v00383	2009-08-12	-	1.238
VBA32	3.12.10.9	20090813.1326	2009-08-13	-	2.940
ViRobot	20090814	2009.08.14	2009-08-14	-	0.424
VirusBuster	4.5.11.10	10.112.5/1799186	2009-08-14	-	5.219
卡巴斯基	5.5.10	2009.08.14	2009-08-14	-	0.058
安博士V3	2009.08.14.06	2009.08.14	2009-08-14	-	0.977
安天	2.0.18	20090814.2703881	2009-08-14	-	0.119
江民杀毒	11.0.800	2009.08.14	2009-08-14	-	3.534
熊猫卫士	9.05.01	2009.08.14	2009-08-14	-	2.464
瑞星	20.0	21.42.44.00	2009-08-14	-	1.172
赛门铁克	1.3.0.24	20090813.022	2009-08-13	-	0.196
趋势科技	8.700-1004	6.364.04	2009-08-14	-	0.077
迈克菲	5.3.00	5708	2009-08-13	-	3.254
金山毒霸	2009.2.5.15	2009.8.14.18	2009-08-14	Win32.TrojDownloader.ww.2624512	0.467
飞塔	2.81-3.120	10.714	2009-08-14	-	0.480

samtogo

to kaba 微点 瑞星 诺顿

尤金卡巴斯基

Heur Kill

kingmuro

过金山毒霸极速版[:26:]

尤金卡巴斯基

Hello,


install.exe - Trojan.Win32.BHO.ydf

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.


Regards, Vitaly Yakutenko
Virus analyst, Kaspersky Lab.

jason_jiang

2009/8/15 8:19:07        文件系统实时防护        文件        D:\Backup\桌面\install.exe        Win32/BHO.NOS 特洛伊木马 的变种        通过删除清除 - 已隔离        JASON\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

linjw

Filename        Result
install.exe         MALWARE


The file 'install.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.1020928.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

葱葱.Com

kaspersky  miss

估计是我没更新的缘故……

悠柚

to IObit Fortinet

ll47548205

2009-08-15 10:18:46    创建文件      操作:阻止
进程路径:D:\新建文件夹\install.exe
文件路径:C:\WINDOWS\system32\30ce923b13.dll
触发规则:所有程序规则->系统关键位置规则->%WinDir%\*.dll


2009-08-15 10:18:46    创建文件      操作:阻止
进程路径:D:\新建文件夹\install.exe
文件路径:D:\新建文件夹\$$306609.bat
触发规则:所有程序规则->危险扩展名规则->?:\*.bat