看看是不是病毒，安装完运行后红伞才报

显示全部楼层 · 发表于 2009-10-20 12:44:50

邮件里收到的，大家看看。
运行后卸载不干净，老自动安装。
伞的病毒库 2009-10-19

显示全部楼层 · 发表于 2009-10-20 12:48:11

Virus check with AntiVirusKit
Version 17.0.7089
Virus signatures of
Start time: 10/20/2009 12:48
Engine(s): Engine A, Engine B
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: install.exe
Path: C:\Documents and Settings\Administrator\桌面\install
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Analysis complete: 10/20/2009 12:48
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2009-10-20 12:48:43

Multi Command-Line Scanner 报告
-------------------------------------------------------------------------
D:\TDDownload\install.exe
MD5 Hash: E6BC86359946024EA7547AE8E9915E61

A-squared ----- Virus.Packed.Win32.Krap!IK
BitDefender -----Nothing
Dr.Web V5 -----Nothing
F-Prot -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/6 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------

任务完成 @ 2009-10-20 星期二 12:48:36.46
注意: 结果可能与GUI版本不同。

显示全部楼层 · 发表于 2009-10-20 12:50:05

Fake AV

Virus check with AntiVirusKit
Version 17.0.7089
Virus signatures of
Start time: 10/20/2009 12:52
Engine(s): Engine A, Engine B
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: AntivirusPro_2010.exe
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\AntivirusPro_2010
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Object: AVEngn.dll
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\AntivirusPro_2010
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Object: htmlayout.dll
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\AntivirusPro_2010
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Object: Uninstall.exe
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\AntivirusPro_2010
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Object: wscui.cpl
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\AntivirusPro_2010
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Object: _scui.cpl
Path: C:\Sandbox\Administrator\DefaultBox\drive\C\WINDOWS\system32
Status: Virus, file deleted
Virus: Packed.Win32.Krap.ah (Engine A)
Analysis complete: 10/20/2009 12:52
28 files checked
6 infected files detected
0 suspected files detected

[ 本帖最后由 jordanpchome 于 2009-10-20 12:52 编辑 ]

显示全部楼层 · 发表于 2009-10-20 13:12:40

又是它;

显示全部楼层 · 发表于 2009-10-20 13:28:46

KIS2010 Packed.Win32.Krap.ah

显示全部楼层 · 发表于 2009-10-20 14:56:28

Fake AV。。

MSE 发现病毒：TrojanDownloader:Win32/FakeRean

[ 本帖最后由 will 于 2009-10-20 14:59 编辑 ]

显示全部楼层 · 发表于 2009-10-20 16:33:29

Zillya! Antivirus(1/1)
相关:http://bbs.kafan.cn/thread-571132-1-1.html

Comodo Antivirus(1/1)
相关:http://bbs.kafan.cn/thread-576771-1-1.html

显示全部楼层 · 发表于 2009-10-20 16:51:02

八成是病毒了，卡巴都没让下载

显示全部楼层 · 发表于 2009-10-20 17:11:02

过红伞小A 郁闷

[病毒样本] 看看是不是病毒，安装完运行后红伞才报

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源