生成物[md5:916d9f]

mofunzone

http://bbs.kafan.cn/viewthread.php?tid=99554&extra=page%3D1
这个的生成物
File:           ie.exe
Status:        
INFECTED/MALWARE
MD5:         916d9f8330c865b46012519d64979839
Packers detected:        
PE_PATCH
Bit9 reports:         File not found
Scanner results
Scan taken on 22 Jun 2007 04:48:29 (GMT)
A-Squared        
Found nothing
AntiVir        
Found TR/Delphi.Downloader.Gen
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found BehavesLike:Win32.ExplorerHijack (probable variant)
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found Possibly a new variant of W32/Backdoor-based
F-Secure Anti-Virus        
Found nothing
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found nothing
NOD32        
Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found nothing

wangjay1980

detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ie.rar/ie.exe

detected: virus Virus.Win32.AutoRun.cq URL: http://bbs.kafan.cn/attachment.php?aid=91051//ie.exe//PE_Patch

[ 本帖最后由 wangjay1980 于 2007-6-22 17:11 编辑 ]

mofunzone

kav7的启发。。
希望vt和jotti早日加入，看看加入后kav的表现。。

wangjay1980

等KAV的启发提高点再说吧

红心王子

扫描不报
运行了之后，斧头等了好长时间，才有反应
暂时先上报了
提示“非常高级别危险信号”四颗星满，立刻禁止其运行！

[ 本帖最后由 红心王子 于 2007-6-22 12:59 编辑 ]

aziok

Virus or unwanted program 'TR/Delphi.Downloader.Gen [TR/Delphi.Downloader.Gen]'
detected in file 'C:\Documents and Settings\????r\桌面\ie.exe.
Action performed: Deny access

freeboyoua

问问怎么样才知道卡巴是启发报出来的啊 ？？

seamonkey

今天玩瑞星:

Whkroran

卡巴7 启发时不显示具体的病毒名，但是提示检测到未知病毒的红色警报，列如：detected: virus Trojan.Generic (modification） ， detected: virus downloader ( modification), detected: virus worm.generic  ,  detected: virus invader (modification) 等等。。。。

jlennon

至少有modification字样的就一定是启发