Ｘ星独报，学校里的东西，比较可疑[MD5: F9573E]

promised

[ 本帖最后由 promised 于 2007-6-22 13:05 编辑 ]

mofunzone

运行后就是加载，什么也没生成，看不出行为，上报了

mofunzone

瑞星居然。。
File:           SVCHOST.EXE
Status:        
INFECTED/MALWARE
MD5:         f9573e1b457dbd9a18b4455557884071
Packers detected:        
-
Bit9 reports:         File not found
Scanner results
Scan taken on 22 Jun 2007 05:04:53 (GMT)
A-Squared        
Found nothing
AntiVir        
Found nothing
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found nothing
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found nothing
NOD32        
Found nothing
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found Trojan.KillProc.j
VirusBuster        
Found nothing
VBA32        
Found nothing

小邪邪

已由访问保护规则禁止 样本\SVCHOST.EXE       
防病毒标准保护:禁止伪装 Windows 进程       
已阻止的操作: 创建

The EQs

[:02:]

Rising Antivirus  Found Trojan.KillProc.j

pollychina

没发现有什么异常！

promised

国产优势

wangjay1980

强淫啊
Hello,

SVCHOST.exek - Trojan.Win32.Small.nx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: ??svc.zip

detected: Trojan program Trojan.Win32.Small.nx URL: http://bbs.kafan.cn/attachment.php?aid=91055//SVCHOST.EXE

[ 本帖最后由 wangjay1980 于 2007-6-22 17:10 编辑 ]

woai_jolin

x星误报！

allenhippo

铁壳报Trojan Horse