packer

Palkia

C:\Documents and Settings\Palkia\My Documents\DL\20091229100715.exe Packed.TDSS.z.eibc.mg 可疑程序 还未处理
20091229100715.exe  55.12/55.12KB       100.00%    在线扫描      它是一个“加壳程序”     2010-1-17 16:19:28   2010-1-17 16:19:32   

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.8	20100117153621	2010-01-17	Packed.Win32.Tdss!IK	11.698
AntiVir	8.2.1.142	7.10.2.203	2010-01-16	TR/PCK.Tdss.Z.1370	0.546
Arcavir	2009	201001160204	2010-01-16	-	0.048
Authentium	5.1.1	201001152349	2010-01-15	-	1.291
AVAST!	4.7.4	100117-0	2010-01-17	Win32:Alureon-EY [Rtk]	0.004
AVG	8.5.288	270.14.146/2627	2010-01-17	Vundo.JO	0.317
BitDefender	7.81008.4861389	7.29917	2010-01-17	-	4.174
CA (VET)	35.1.0	7239	2010-01-15	Win32/Alureon!generic trojan.	5.593
ClamAV	0.95.2	10304	2010-01-16	Trojan.TDSS-2529	0.022
Comodo	3.13.579	3409	2010-01-17	-	0.957
CP Secure	1.3.0.5	2010.01.16	2010-01-16	Packed.W32.TDSS.z	0.063
Dr.Web	4.44.0.9170	2010.01.16	2010-01-16	BackDoor.Tdss.based.3	10.879
F-Prot	4.4.4.56	20100116	2010-01-16	-	1.358
F-Secure	7.02.73807	2010.01.17.01	2010-01-17	Packed.Win32.TDSS.z [AVP]	2.802
GData	19.9999/19.681	20100116	2010-01-16	Packed.Win32.TDSS.z [Engine:A]	13.506
Ikarus	T3.1.01.80	2010.01.17.74981	2010-01-17	Packed.Win32.Tdss	4.542
Microsoft	1.5302	2010.01.17	2010-01-17	Trojan:Win32/Alureon.CT	8.619
Norman	6.01.09	6.01.00	2010-01-16	-	4.015
nProtect	20100117.01	6899617	2010-01-17	-	14.815
Quick Heal	10.00	2010.01.16	2010-01-16	Win32.Packed.TDSS.z.5	2.314
Sophos	3.03.0	4.49	2010-01-17	Mal/TDSSPk-C	3.271
Sunbelt	3.9.2390.2	5621	2010-01-16	Trojan.Win32.Alureon.bk (v)	5.681
The Hacker	6.5.0.6	v00154	2010-01-17	Trojan/TDSS.z	1.261
VBA32	3.12.12.1	20100115.0633	2010-01-15	Malware-Cryptor.Win32.General.10	2.817
ViRobot	20100116	2010.01.16	2010-01-16	-	1.818
VirusBuster	4.5.11.10	10.119.6/2018150	2010-01-16	Trojan.Alureon.LFB	2.376
卡巴斯基	5.5.10	2010.01.17	2010-01-17	Packed.Win32.TDSS.z	0.074
安博士V3	2010.01.17.00	2010.01.17	2010-01-17	Win-Trojan/Xema.variant	5.177
安天	2.0.18	20100112.3695772	2010-01-12	-	0.120
江民杀毒	13.0.900	2010.01.17	2010-01-17	Packed.Tdss.asci	34.141
熊猫卫士	9.05.01	2010.01.15	2010-01-15	-	2.647
瑞星	20.0	22.30.06.04	2010-01-17	-	1.892
赛门铁克	1.3.0.24	20100112.005	2010-01-12	-	0.004
趋势科技	9.120-1004	6.776.02	2010-01-16	BKDR_TDSS.SM	0.022
迈克菲	5.3.00	5863	2010-01-16	DNSChanger!cs	3.355
金山毒霸	2009.2.5.15	2010.1.16.20	2010-01-16	-	0.649
飞塔	11.382-	11.382	2010-01-16	-	0.646

wcj20236

mpav  kill

wliao

微点

那些报名的是解壳还是带壳入库的...

ray1106

2010-01-17 17:23:25
注册表保护(创建注册表值)     操作:允许
进程路径:C:\Documents and Settings\Ray\桌面\20091229100715.exe
注册表路径:HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager
注册表名称:PendingFileRenameOperations
改下注册表就退出了

衍生物




C:\Sandbox\8.tmp
detected: Packed.Win32.Tdss!IK

Palkia

C:\Documents and Settings\Palkia\My Documents\DL\8.rar>>8.tmp        Packed.TDSS.z.eibc.mg        可疑程序        还未处理