Quickheal patchX3

显示全部楼层 · 发表于 2009-8-30 19:50:41

ESET 4381过了 Serial.Quick.Heal.AntiVirus.2009.45042.exe
行为：
Crack.Quick.Heal.AntiVirus.2009.exe；Keygen.Quick.Heal.AntiVirus.2009.exe：
加壳：UPX 0.89.6 - 1.02 / 1.05 - 1.24 - > markus _ lasslo
打开一个 tcp 端口
Serial.Quick.Heal.AntiVirus.2009.45042.exe：
新建%windir%\system32\msxm.dll

显示全部楼层 · 发表于 2009-8-30 20:10:54

红伞拦截[localimg=420,355]1[/localimg]

[ 本帖最后由 xushilin 于 2009-8-30 20:14 编辑 ]

显示全部楼层 · 发表于 2009-8-30 20:28:46

2009/8/30 20:28:02 已清除木马程序 Trojan.Win32.Agent.cvit G:\Temp\Virus\Quickheal.rar/Crack.Quick.Heal.AntiVirus.2009.exe
2009/8/30 20:28:02 已清除木马程序 Trojan.Win32.Agent.cvit G:\Temp\Virus\Quickheal.rar/Keygen.Quick.Heal.AntiVirus.2009.exe

Miss 1,To KL

显示全部楼层 · 发表于 2009-8-30 20:42:16

Hello,

Serial.Quick.Heal.AntiVirus.2009.45042.exe - Trojan.Win32.FraudPack.sbm

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best wishes, Pavel Firsov.
Virus analyst , Kaspersky Lab.

Ph.: +7(095)797-8700
Fax.: +7 (495) 948-43-31
newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-8-30 21:35:13

Symantec kills all

显示全部楼层 · 发表于 2009-8-30 21:44:18

RIS2010
Trojan.Win32.Generic.11ECCB7A
Trojan.Win32.Generic.11ECCB7A

其中启发式扫描分析发现一个可疑加壳程序，已上报瑞星云安全自动分析系统
RS20090830181839921626

显示全部楼层 · 发表于 2009-8-30 23:52:14

"G:\Virus\Quickheal.rar:\Crack.Quick.Heal.AntiVirus.2009.exe";"特洛伊木马 Downloader.Generic8.BJZB";"已感染"
"G:\Virus\Quickheal.rar:\Keygen.Quick.Heal.AntiVirus.2009.exe";"特洛伊木马 Downloader.Generic8.BJZB";"已感染"

显示全部楼层 · 发表于 2009-8-31 14:45:01

1 to avira

显示全部楼层 · 发表于 2009-8-31 15:05:53

不，TF是靠你本机上有的杀软进行所谓的“联合”

[可疑文件] Quickheal patchX3

回复 9楼 451102995 的帖子