NOD32升級ID獲取器(17楼有新)

显示全部楼层 · 发表于 2009-9-18 12:56:44

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\TDDownload\key.exe
MD5 Hash: 8DCB7C5C7532C8B2A6D810CC607255F0

A-squared -----Nothing
BitDefender -----Nothing
F-Prot -----Nothing
Panda ----- Suspicious file
Sophos ----- Mal/EncPk-BW
VBA32 -----Nothing

*** 2/6 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2009-09-18 星期五 12:55:19.35
Note: The results might be different from that of the GUI version.

[quote]
Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\TDDownload\nod32id.exe
MD5 Hash: 93C566D48C322D8411517502808FC5F9

A-squared ----- Trojan-PWS.Win32.QQPass!IK
BitDefender ----- Trojan.Inject.GO
F-Prot ----- W32/DelfInject.A.gen!Eldorado
Panda -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 3/6 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2009-09-18 星期五 12:56:07.09
Note: The results might be different from that of the GUI version.

显示全部楼层 · 发表于 2009-9-18 14:23:49

瑞星2010
Backdoor.Win32.Drwolf.fyr

显示全部楼层 · 发表于 2009-9-18 16:11:12

类别: 工具

说明: 这个程序用于创建病毒、蠕虫或其他恶意软件。

建议: 立即删除这个软件。

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
containerfile:C:\Download\nod32.7z
file:C:\Download\nod32.7z->nod32.ex$e->(nsis-3-Shell_Signd.exe)

显示全部楼层 · 发表于 2009-9-18 16:11:39

红伞被过了。

显示全部楼层 · 发表于 2009-9-18 17:03:05

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NOD32.EXE
可疑程序生成以下文件：
1) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\SHELL_SIGND.EXE
2) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\NOD32ID.EXE
是否阻止该进程继续运行?

显示全部楼层 · 发表于 2009-9-18 17:58:32

晕，难得有个可以升级的，结果还是病毒，看来以后用杀软要小心点了。

显示全部楼层 · 发表于 2009-9-19 23:21:23

99e100a2f85228151518a794369e700b kaba.exe4

to kl,ll,antivir,comodo

https://www.virustotal.com/anali ... a9c3ffeb-1253373583

The file 'kaba.exe4' has been determined to be 'UNDER ANALYSIS'.

The file 'kaba.exe4' has been determined to be 'MALWARE'. Our analysts named the threat DR/Sasfis.ndq. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.

[ 本帖最后由 sam.to 于 2009-9-21 17:49 编辑 ]

显示全部楼层 · 发表于 2009-9-21 16:47:24

谢谢分享！

显示全部楼层 · 发表于 2009-9-21 16:48:27

貌似不错的资源啊
支持了啊

[病毒样本] NOD32升級ID獲取器(17楼有新)

本帖子中包含更多资源

浏览过的版块