5x

z2665

只加壳 不管死活。文件是一个不知道是哪生产的偏门后门

jason_jiang

EAV4 missed 3, to
2009/8/15 16:37:47        文件系统实时防护        文件        D:\Backup\桌面\sa3.exe        可能是 Win32/Genetik 特洛伊木马 的变种        通过删除清除 - 已隔离        JASON\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.
2009/8/15 16:37:47        文件系统实时防护        文件        D:\Backup\桌面\sa2.exe        可能是 Win32/Genetik 特洛伊木马 的变种        通过删除清除 - 已隔离        JASON\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

popfather

上报瑞星，原文件瑞星好像都没查出来

尤金卡巴斯基

2009/8/15 17:08:04        已隔离        病毒 Type_Win32        G:\Temp\Virus\tset.rar/sa1.exe               
2009/8/15 17:08:05        已清除        木马程序 Trojan-Banker.Win32.Bancos.dnr        G:\Temp\Virus\tset.rar/sa2.exe               
2009/8/15 17:08:05        已清除        木马程序 Trojan-Banker.Win32.Bancos.dnr        G:\Temp\Virus\tset.rar/sa3.exe               


To KL

悠柚

to IObit

hansyu

NIS2009 Miss 3
Suspicious.MH690.A

purplegold

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Magian King\桌面\tset\sa1.exe'
C:\Documents and Settings\Magian King\桌面\tset\sa1.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
Begin scan in 'C:\Documents and Settings\Magian King\桌面\tset\sa2.exe'
C:\Documents and Settings\Magian King\桌面\tset\sa2.exe
    [DETECTION] Contains HEUR/Crypted suspicious code
Begin scan in 'C:\Documents and Settings\Magian King\桌面\tset\sa3.exe'
C:\Documents and Settings\Magian King\桌面\tset\sa3.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
Begin scan in 'C:\Documents and Settings\Magian King\桌面\tset\sa4.exe'
C:\Documents and Settings\Magian King\桌面\tset\sa4.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
Begin scan in 'C:\Documents and Settings\Magian King\桌面\tset\sa.exe'
C:\Documents and Settings\Magian King\桌面\tset\sa.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan

hj5abc

蜘蛛路过，to lab

尤金卡巴斯基

Hello,


sa.exe

No malicious code was found in this file.

sa4.exe - Trojan.Win32.Agent.cufq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.


Regards, Vladislav Pintiysky
Virus Analyst

欠妳緈諨

IKARUS - T3SCAN V1.32.10.0 (WIN32)
         T3 V1.01.64
         Copyright (c) 2006 - 2009 by Ikarus Software.
         All rights reserved.

Signature-database from 12.8.2009 08:01:30 (Build: 73225)

S:\tset\sa.exe - 特征码 'Virus.Win32.DsBot.I' 被发现
S:\tset\sa1.exe - 特征码 'Trojan.Win32.Buzus' 被发现
S:\tset\sa2.exe - 特征码 'Trojan.Win32.Buzus' 被发现
S:\tset\sa3.exe - 特征码 'Packed.Win32.Klone' 被发现
S:\tset\sa4.exe - 特征码 'Backdoor.Rbot' 被发现

        5 文件被扫描
          (0 压缩档 0 文件)
        5 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.079