【f7f968】dll一个

jlennon

VM里找到的。

The EQs

Scan performed at: 2007-6-8 16:20:34
Scanning Log
NOD32 version 2317 (20070607) NT
Command line: C:\Documents and Settings\EQ2\桌面\wgso0.zip
Operating memory - is OK

Date: 8.6.2007  Time: 16:20:39
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wgso0.zip
C:\Documents and Settings\EQ2\桌面\wgso0.zip ?ZIP ?wgso0.dll - Win32/Pacex.Gen virus
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:20:39 Total scanning time: 0 sec (00:00:00)

promised

Scan performed at: 2007-6-8 16:20:23
Scanning Log
NOD32 version 2317 (20070607) NT
Command line: C:\ABC\wgso0.zip
Operating memory - is OK

Date: 8.6.2007  Time: 16:20:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\ABC\wgso0.zip
C:\ABC\wgso0.zip ?ZIP ?wgso0.dll - Win32/Pacex.Gen virus
Number of scanned files: 3
Number of threats found: 1
Number of active threats: 1
Time of completion: 16:20:31 Total scanning time: 3 sec (00:00:03)

darkradx

Virus or unwanted program 'TR/Crypt.ULPM.Gen [TR/Crypt.ULPM.Gen]'
detected in file 'C:\Documents and Settings\Joseph Wan\Desktop\wgso0\wgso0.dll.
Action performed: Allow access

AVAST挂

woai_jolin

ess

2007/6/8 16:12:50        Scanning Log
2007/6/8 16:12:50        Version of virus signature database: 2317 (20070607)
2007/6/8 16:12:50        Date: 8.6.2007  Time: 16:12:50
2007/6/8 16:12:50        Scanned disks, folders and files: E:\病毒测试\
2007/6/8 16:12:54        E:\病毒测试\wgso0.zip - Win32/Pacex.Gen virus - deleted
2007/6/8 16:12:54        E:\病毒测试\wgso0.zip » ZIP » wgso0.dll - Win32/Pacex.Gen virus
2007/6/8 16:12:54        Number of scanned files: 2
2007/6/8 16:12:54        Number of threats found: 1
2007/6/8 16:12:54        Time of completion: 16:12:54  Total scanning time: 4 sec (00:00:04)

samancy

费尔杀了

The EQs

费尔也报这个？？？难道和eset合作？。。。。

promised

原帖由 samancy 于 2007-6-8 16:22 发表
费尔杀了
84164

PACEX.GEN

promised

原帖由 EQ2 于 2007-6-8 16:23 发表
费尔也报这个？？？难道和eset合作？。。。。

记得以前还看到费尔报 ULPM.gen

The EQs

发现微点和nod32都会报Genetik，微点说是Genetik 这是病毒或木马的主名称，一般是从样本内部提取字符串命名的