Backdoor.Win32.Cmjspy.cg

绅博周幸

AntiVir	Found HEUR/Malware
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Backdoor.Win32.Cmjspy.cg
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Backdoor.Win32.Cmjspy.cg
NOD32	Found a variant of Win32/CmjSpy
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\m2syadll.rar'
C:\Documents and Settings\Administrator\My Documents\
  m2syadll.rar
    [0] Archive type: RAR
    --> m2syadll.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
费尔果然就扫描不到了。。
启发不是一个级别的。。

The EQs

Scan performed at: 2007-3-11 8:50:12
Scanning Log
NOD32 version 2106 (20070310) NT
Command line: C:\Documents and Settings\EQ2\桌面\m2syadll.rar
Operating memory - is OK

Date: 11.3.2007  Time: 08:50:16
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\m2syadll.rar
C:\Documents and Settings\EQ2\桌面\m2syadll.rar ?RAR ?m2syadll.dll - a variant of Win32/CmjSpy trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 08:50:17 Total scanning time: 1 sec (00:00:01)

hsjj2005

确实费尔扫描未报

电影结束了

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-3-10
开始时间: 2007-3-11 10:20
引擎: KAV 引擎 (AVK 17.3052), BD 引擎 (BD 17.2292)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: m2syadll.dll
        在压缩档案里: F:\m2syadll.rar
        Status: 已发现病毒
        病毒: Backdoor.Win32.Cmjspy.cg (KAV 引擎)
对象: m2syadll.rar
        路径: F:
        Status: 已发现病毒
        病毒: Backdoor.Win32.Cmjspy.cg (KAV 引擎)
扫描完成: 2007-3-11 10:20
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件

bridgewr

dll文件，上报微点确认

马力

驱逐舰

kp2006

金山报

病毒        2007-03-11 15:40:47        D:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\M2SYADLL.RAR\m2syadll.dll        Win32.Hack.MagicLink.ae.117641        跳过，未处理        
信息        2007-03-11 15:40:40        金山毒霸主程序启动查毒过程，查毒方式：命令行查毒                        
信息        2007-03-11 15:40:39        金山毒霸主程序 启动

kv不报

flowerpig

偶得金山引擎就不报