☆高质量样本☆目前微软一家报毒。

显示全部楼层 · 发表于 2009-10-8 17:11:52

http://update1.windows-pcdefender.com/download.php?put=nogui&abbr=WPCD&file=ReleaseXP.exe&ttl=d1c42521f36

我权限太小了。，上传不了这个附件。只能提供网址了。请高手鉴定。

显示全部楼层 · 发表于 2009-10-8 17:13:29

怎么看着像大水冲了龙王庙

显示全部楼层 · 发表于 2009-10-8 17:19:22

这是什么？

显示全部楼层 · 发表于 2009-10-8 17:21:21

如果是威胁，看文件名

应该就是fakeav之类的了

显示全部楼层 · 发表于 2009-10-8 17:29:47

RS20091008172339468078

显示全部楼层 · 发表于 2009-10-8 17:31:24

To KL

显示全部楼层 · 发表于 2009-10-8 17:53:34

mp kill

显示全部楼层 · 发表于 2009-10-8 18:50:01

File ID 燜ilename Size (Byte) Result
25468516  ReleaseXP.rar 2.09 MB OK

A listing of files contained inside archives alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
25468452  ReleaseXP.exe  2.22 MB  RISK

Please find a detailed report concerning each individual sample below:

燜ilename Result
ReleaseXP.exe  RISK

The file 'ReleaseXP.exe' has been determined to be 'RISK'. Our analysts named the threat SPR/Fake.WPCD.456. The term "SPR/" ("Security or Privacy Risk") denotes a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-10-8 18:53:56

已报告的攻击站点！
位于 update1.windows-pcdefender.com 的站点已经被报告为攻击网站，而且已根据您的安全首选项而阻止。

FF就能拦截

显示全部楼层 · 发表于 2009-10-8 18:56:38

看图标像是fakeav

Multi Command-Line Scanner 报告
-------------------------------------------------------------------------
D:\TDDownload\ReleaseXP.exe
MD5 Hash: C97FC3245614EF254CFD5DC380B7FB70

A-squared -----Nothing
AntiVir V7 -----Nothing
BitDefender -----Nothing
ClamWin -----Nothing
Dr.Web V5 -----Nothing
F-Prot -----Nothing
Mcafee -----Nothing
Sophos ----- Mal/Basine-C
VBA32 -----Nothing

*** 1/9 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------

任务完成 @ 2009/10/08 周四 18:56:32.23
注意: 结果可能与GUI版本不同。

Sophos可杀

[病毒样本] ☆高质量样本☆目前微软一家报毒。