1~

Palkia

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.3	20090815010138	2009-08-15	-	0.365
AntiVir	8.2.1.1	7.1.5.117	2009-08-14	HEUR/Malware	0.135
Arcavir	2009	200908131337	2009-08-13	-	0.039
Authentium	5.1.1	200908141913	2009-08-14	-	1.272
AVAST!	4.7.4	090814-0	2009-08-14	Win32:VBGen-AJ [Wrm]	0.006
AVG	8.5.288	270.13.58/2304	2009-08-15	-	0.418
BitDefender	7.81008.3866382	7.27170	2009-08-15	-	3.324
CA (VET)	9.0.0.143	31.6.6677	2009-08-15	-	6.933
ClamAV	0.95.2	9698	2009-08-15	-	0.017
Comodo	3.10	1978	2009-08-14	-	0.717
CP Secure	1.1.0.715	2009.08.14	2009-08-14	-	12.052
Dr.Web	4.44.0.9170	2009.08.15	2009-08-15	WIN.IRC.WORM.Virus	5.125
F-Prot	4.4.4.56	20090814	2009-08-14	-	1.325
F-Secure	7.02.73807	2009.08.15.02	2009-08-15	Email-Worm.Win32.generic [AVP]	0.118
GData	19.7146/19.439	20090815	2009-08-15	Win32:VBGen-AJ [Wrm] [Engine:B]	4.750
Ikarus	T3.1.01.64	2009.08.15.73242	2009-08-15	-	4.148
Microsoft	1.4903	2009.08.14	2009-08-14	Worm:Win32/NewMalware.Q(Suspicious)	6.932
Norman	6.01.09	6.01.00	2009-08-14	-	4.007
nProtect	20090814.02	5011827	2009-08-14	-	6.286
Quick Heal	10.00	2009.08.13	2009-08-13	-	1.124
Sophos	2.89.1	4.44	2009-08-15	-	4.704
Sunbelt	5332	5332	2009-08-14	-	1.298
The Hacker	6.3.4.3	v00383	2009-08-12	-	0.821
VBA32	3.12.10.9	20090814.1942	2009-08-14	-	1.931
ViRobot	20090814	2009.08.14	2009-08-14	-	0.442
VirusBuster	4.5.11.10	10.112.5/1799186	2009-08-14	-	2.471
卡巴斯基	5.5.10	2009.08.15	2009-08-15	-	0.093
安博士V3	2009.08.15.01	2009.08.15	2009-08-15	-	0.779
安天	2.0.18	20090815.2707616	2009-08-15	-	0.120
江民杀毒	11.0.800	2009.08.15	2009-08-15	-	3.526
熊猫卫士	9.05.01	2009.08.15	2009-08-15	-	1.863
瑞星	20.0	21.42.52.00	2009-08-15	-	0.836
赛门铁克	1.3.0.24	20090814.004	2009-08-14	W32.HLLW.Erife@mm	0.179
趋势科技	8.700-1004	6.366.11	2009-08-15	-	0.030
迈克菲	5.3.00	5709	2009-08-14	W32/Generic.a@MM	3.060
金山毒霸	2009.2.5.15	2009.8.15.15	2009-08-15	-	0.567
飞塔	2.81-3.120	10.718	2009-08-15	-	0.210

[ 本帖最后由 Palkia 于 2009-8-15 21:42 编辑 ]

Palkia

不服气再改~~这次做的过了瑞星行为防御了~

linjw

The file '##########.ex1e' has been determined to be 'UNDER ANALYSIS'.

尤金卡巴斯基

2009/8/15 21:32:54        已隔离        病毒 Email-Worm.Win32.generic        G:\Temp\Virus\你再敢拦截.rar/你再敢拦截.ex1e               
To KL

jason_jiang

2009/8/15 21:34:53        文件系统实时防护        文件        D:\Backup\桌面\你再敢拦截.ex1e        未查明的 NewHeur_PE 病毒        通过删除清除 - 已隔离        JASON\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\WinRAR\WinRAR.exe.

yjwfdc

厉害，除了占用大量cpu之外，什么动作都没有。

尤金卡巴斯基

Hello,


?????.ex1e - Backdoor.Win32.VB.kct

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.


Regards, Vladislav Pintiysky
Virus Analyst

sam.to

to ll