pa_0177.exe[md5:aed3e4]

mofunzone

File:           pa_0177.exe
Status:        
INFECTED/MALWARE
MD5:         aed3e401154d47aeac637847b44887a5
Packers detected:        
PE_PATCH.UPX, UPX
Bit9 reports:         File not found
Scanner results
Scan taken on 20 Jun 2007 23:33:17 (GMT)
A-Squared        
Found nothing
AntiVir        
Found nothing
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found not-a-virus:Dialer.Win32.Agent.k (6, 2, 602)
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found not-a-virus:Dialer.Win32.Agent.k
NOD32        
Found nothing
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found MalwareScope.Downloader.Small.4

红心王子

斧头扫描没反应
运行之后监控提示

rasis

上报。。。

[ 本帖最后由 rasis 于 2007-6-21 08:14 编辑 ]

a256886572008

運行pa_0177.exe，發現下列行為，被EQ-Secure RC2攔截！
----------------
2007-06-21 08:12:37    运行应用程序      操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\pa_0177\pa_0177.exe
规则:应用程序规则->系統程序->%windir%\Explorer.EXE


2007-06-21 08:12:37    创建文件      操作:阻止
进程路径:D:\桌面\virus\pa_0177\pa_0177.exe
文件路径:C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\1.dll
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.dll


2007-06-21 08:12:37    创建文件      操作:阻止
进程路径:D:\桌面\virus\pa_0177\pa_0177.exe
文件路径:C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\1.dll
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.dll


2007-06-21 08:12:37    创建文件      操作:阻止
进程路径:D:\桌面\virus\pa_0177\pa_0177.exe
文件路径:C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\1.dll
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.dll

-------------------------------------------
1.他會在C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\產生
   1.dll

taihuxian

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=90422 is infected with not-a-virus:Dialer.Win32.Agent.k virus

promised

?         Copyright (c) 1993-2007 by VBA Ltd.           ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\pa_0177.rar:<RAR>\pa_0177.exe : infected MalwareScope.Downloader.Small.4
Program execution terminated by user


Directories       : 4       Files in archives:      Files on disks:
Archives:                   - total       : 4       - total       : 32
- scanned         : 4       -  scanned    : 4       - scanned     : 31
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 18:49:32 21-06-2007
End        : 18:49:36 21-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

sjducker

F-Secure Anti-Virus         
Found not-a-virus:Dialer.Win32.Agent.k (6, 2, 602)

??????????????
我的604怎么没有报啊？
5555555555555

小邪邪

rasis

pa_0177.exe
      [DETECTION] Contains signature of the dial-up program DIAL/27648.A.42

scottxzt

确认无毒的话，也可以设置不报。


Starting the file scan:
Begin scan in 'D:\Documents and Settings\dell\桌面\pa_0177.rar'
D:\Documents and Settings\dell\桌面\

End of the scan: 2007年6月22日  00:09
Used time: 00:03 min
The scan has been done completely.
      0 Scanning directories
      3 Files were scanned
      0 viruses and/or unwanted programs were found

[ 本帖最后由 scottxzt 于 2007-6-22 00:05 编辑 ]