mg_16248.scr[md5:bd8749]

显示全部楼层 · 发表于 2007-6-22 12:39:58

File: img_16248.scr
Status:
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5: bd8749b5c9249841f8c81b2aa17fc941
Packers detected:
PE_PATCH, UPACK
Bit9 reports: File not found
Scanner results
Scan taken on 22 Jun 2007 04:43:34 (GMT)
A-Squared
Found nothing
AntiVir
Found W32/Selfish.a
ArcaVir
Found Heur.Win32
Avast
Found nothing
AVG Antivirus
Found PSW.Banker3.POH
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found Trojan.MulDrop.6379
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found Trojan-Downloader.Win32.Agent.bur
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Trojan-Downloader.Win32.Agent.bur
NOD32
Found nothing
Norman Virus Control
Found W32/Suspicious_U.gen
Panda Antivirus
Found Trj/Nabload.BNP
Rising Antivirus
Found nothing
VirusBuster
Found Packed/Upack
VBA32
Found nothing

显示全部楼层 · 发表于 2007-6-22 12:41:26

咖啡：PWS-Banker.dldr (特洛伊)

显示全部楼层 · 发表于 2007-6-22 12:55:48

Virus or unwanted program 'W32/Selfish.a [W32/Selfish.a]'
detected in file 'C:\Documents and Settings\????\桌面\img_16248.scr.
Action performed: Deny access

显示全部楼层 · 发表于 2007-6-22 13:07:07

监控拦截

显示全部楼层 · 发表于 2007-6-22 14:45:01

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=91046 is infected with Trojan-Downloader.Win32.Agent.bur virus

显示全部楼层 · 发表于 2007-6-22 14:50:24

運行img_16248.scr，發現下列行為，被EQ-Secure RC2攔截！

2007-06-22 14:52:43 运行应用程序    操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\img_16248\img_16248.scr
命令行:/S
规则:应用程序规则->系統程序->%windir%\Explorer.EXE

2007-06-22 14:52:43 创建文件    操作:阻止
进程路径:D:\桌面\virus\img_16248\img_16248.scr
文件路径:C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\edhb.bat
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.bat

1.他會在C:\Documents and Settings\Hung Jui Hung\Local Settings\Temp\產生
edhb.bat

显示全部楼层 · 发表于 2007-6-22 14:50:48

Panda 2008 beta 自动拦截

Virus detected: Trj/Nabload.BNP 06/22/07 14:52:19 Deleted Location: http://bbs.kafan.cn/attachment.php?aid=91046

显示全部楼层 · 发表于 2007-6-22 16:02:44

病毒: Trojan-Downloader.Win32.Agent.bur
文件: img_16248[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VM1NGYS8
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-6-22 17:17:57

显示全部楼层 · 发表于 2007-6-22 17:31:28

Virus: Trojan-Downloader.Win32.Agent.bur

Virus found while downloading Web content.

Address: bbs.kafan.cn

[病毒样本] mg_16248.scr[md5:bd8749]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源