Statement-Details.exe

显示全部楼层 · 发表于 2011-5-8 14:42:26

Auto post by promised's robot
PM me if having problems
CAT-QuickHeal Found Nothing
McAfee Found Artemis!ED4A58BA2F75
TheHacker Found Nothing
K7AntiVirus Found Nothing
VirusBuster Found Nothing
NOD32 Found Nothing
F-Prot Found Nothing
Symantec Found Nothing
Norman Found W32/Obfuscated.D!genr
TrendMicro-HouseCall Found Nothing
Avast Found BV:Agent-GE
eSafe Found Nothing
ClamAV Found Nothing
Kaspersky Found Trojan.BAT.Zapchast.at
BitDefender Found Gen:Heur.Raldhep.1
SUPERAntiSpyware Found Nothing
Emsisoft Found Trojan.SuspectCRC!IK
Comodo Found Nothing
F-Secure Found Gen:Heur.Raldhep.1
DrWeb Found Trojan.Keylog.152
VIPRE Found Trojan.Win32.Generic.pak!cobra
AntiVir Found TR/Dropper.Gen
TrendMicro Found Nothing
McAfee-GW-Edition Found Artemis!ED4A58BA2F75
Sophos Found Nothing
eTrust-Vet Found Win32/Fakedoc_i
Jiangmin Found Nothing
Antiy-AVL Found Nothing
Microsoft Found Nothing
ViRobot Found Nothing
Prevx Found Medium Risk Malware Dropper
GData Found Gen:Heur.Raldhep.1
Commtouch Found Nothing
AhnLab-V3 Found Trojan/Win32.Zapchast
VBA32 Found Nothing
PCTools Found Nothing
Rising Found Nothing
Ikarus Found Trojan.SuspectCRC
Fortinet Found Nothing
AVG Found Generic22.AHQJ
Panda Found Trj/CI.A
Avast5 Found BV:Agent-GE

显示全部楼层 · 发表于 2011-5-8 14:44:38

to eset

http://camas.comodo.com/cgi-bin/ ... 93b53ed867c655637ed

http://samples.nod32.com.hk/inde ... 1b590fbaeaf762e4496

显示全部楼层 · 发表于 2011-5-8 15:07:56

KIS

对象被Trojan.BAT.Zapchast.at感染

显示全部楼层 · 发表于 2011-5-8 15:22:51

本帖最后由 aaaaoooo 于 2011-5-8 15:24 编辑

金山鉴定中，360SD KILL...

现在金山鉴定为木马。。。。。

显示全部楼层 · 发表于 2011-5-8 15:33:09

这个有意思

Firewall: Automatic decision
2011/5/8 15:28
Allowed
System, Outgoing UDP access allowed to: 127.0.0.1:61874
Program Guard: Statement-Details[1].exe -> start.bat
2011/5/8 15:27
Allowed
C:\Users\xxxx\Desktop\Statement-Details[1].exe\Statement-Details[1].exe wants to create executable file C:\MSOCache\start.bat
Program Guard: Statement-Details[1].exe -> process.exe
2011/5/8 15:27
Blocked
C:\Users\xxxx\Desktop\Statement-Details[1].exe\Statement-Details[1].exe wants to delete executable file C:\MSOCache\process.exe
Program Guard: Statement-Details[1].exe -> WScript.exe
2011/5/8 15:27
Blocked
C:\Users\xxxx\Desktop\Statement-Details[1].exe\Statement-Details[1].exe(3440) wants to start C:\Windows\System32\WScript.exe
Program Guard: WScript.exe
2011/5/8 15:27
Trusted
C:\Windows\System32\WScript.exe was trusted automatically.
Program Guard: Statement-Details[1].exe
2011/5/8 15:27
Allowed
C:\Windows\explorer.exe -> C:\Users\xxxx\Desktop\Statement-Details[1].exe\Statement-Details[1].exe

显示全部楼层 · 发表于 2011-5-8 15:35:46

这是生成物

显示全部楼层 · 发表于 2011-5-8 15:47:41

金山kill

显示全部楼层 · 发表于 2011-5-8 17:48:00

大蜘蛛：

Statement-Details[1].exe - archive ZIP
Statement-Details[1].exe/process.exe found virus Trojan.Keylog.152

显示全部楼层 · 发表于 2011-5-8 17:49:27

已上报ESET

显示全部楼层 · 发表于 2011-5-8 17:56:43

win32.troj.generic.(kcloud)

[病毒样本] Statement-Details.exe

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块