video78397463525374859.exe

显示全部楼层 · 发表于 2011-5-8 14:53:31

Auto post by promised's robot
PM me if having problems
CAT-QuickHeal Found Nothing
McAfee Found Artemis!1F0CA480D24B
TheHacker Found Nothing
K7AntiVirus Found Nothing
VirusBuster Found Nothing
NOD32 Found Nothing
F-Prot Found Nothing
Symantec Found Nothing
Norman Found Nothing
TrendMicro-HouseCall Found Nothing
Avast Found Nothing
eSafe Found Nothing
ClamAV Found Nothing
Kaspersky Found not-a-virus:Client-IRC.Win32.mIRC.616
BitDefender Found Nothing
SUPERAntiSpyware Found Nothing
Sophos Found Nothing
Comodo Found Nothing
F-Secure Found Nothing
DrWeb Found Trojan.MulDrop2.13137
VIPRE Found Nothing
AntiVir Found Nothing
TrendMicro Found Nothing
McAfee-GW-Edition Found Artemis!1F0CA480D24B
Emsisoft Found Nothing
eTrust-Vet Found Nothing
Jiangmin Found Nothing
Antiy-AVL Found Nothing
Microsoft Found Nothing
ViRobot Found Nothing
Prevx Found Medium Risk Malware
GData Found Nothing
Commtouch Found Nothing
AhnLab-V3 Found Nothing
VBA32 Found Trojan.Win32.Generic
PCTools Found Nothing
Rising Found Trojan.Win32.Fednu.bwg
Ikarus Found Nothing
Fortinet Found Misc/MIRC
AVG Found Nothing
Panda Found Nothing
Avast5 Found Nothing

显示全部楼层 · 发表于 2011-5-8 15:00:08

to eset

显示全部楼层 · 发表于 2011-5-8 15:14:23

过360杀毒，金山鉴定中。。。

显示全部楼层 · 发表于 2011-5-8 15:16:05

数字网盾未知

显示全部楼层 · 发表于 2011-5-8 15:27:15

KIS

2011/5/8 15:24:34 Firefox 检测到威胁: not-a-virus:Client-IRC.Win32.mIRC.616 http://bbs.kafan.cn/forum-attachment-aid-MTIyMDUyOXw3MTdjNWM1Y3wxMzA0ODM5NTk4fDM5NTY1NQ%3D%3D.html//video78397463525374859[1].exe//0

显示全部楼层 · 发表于 2011-5-8 18:06:22

大蜘蛛：video78397463525374859[1].exe infected with Trojan.MulDrop2.13137

显示全部楼层 · 发表于 2011-5-8 22:31:20

Micropoint Proavtive Defence Sofeware 2.0

Found Nothing

显示全部楼层 · 发表于 2011-5-8 22:49:47

2011-05-08 22:45:14 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\*

2011-05-08 22:45:14 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari\Sohbet odalari
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\*\*

2011-05-08 22:45:15 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari\Sohbet odalari\sohbet169.exe
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\*.exe

2011-05-08 22:45:16 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari\Sohbet odalari\Asi_Mavi.php
触发规则:所有程序规则->文件创建设置_普通模式->*.php

2011-05-08 22:45:16 修改文件    操作:阻止
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari\Sohbet odalari\Asi_Mavi.php
触发规则:所有程序规则->文件创建设置_普通模式->*.php

2011-05-08 22:45:20 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Program Files\Sohbet odalari\Sohbet odalari\Uninstall.exe
触发规则:所有程序规则->%ProgramFiles%设置->%ProgramFiles%\*.exe

2011-05-08 22:45:23 创建文件    操作:允许
进程路径:F:\virus\video78397463525374859[1][1].exe\video78397463525374859[1].exe
文件路径:C:\Documents and Settings\Administrator\桌面\Turkce Sohbet Muhabbet.lnk
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\桌面\*.lnk

2011-05-08 22:45:40 运行应用程序    操作:阻止
进程路径:C:\Program Files\Sohbet odalari\Sohbet odalari\sohbet169.exe
文件路径:C:\WINDOWS\regedit.exe
命令行:/S Asi_Mavi.php
触发规则:所有程序规则->系统程序设置->*\regedit.exe

显示全部楼层 · 发表于 2011-5-8 23:38:38

immunet clean

[病毒样本] video78397463525374859.exe

本帖子中包含更多资源