几个比较新的恶意程序……AntiVir全报，kaspersky保持沉默的时候多
endurer 原创
2006-12-16 第1版
在线扫描几个从网上下载的恶意程序文件的结果。
文件说明符 : D:/cl.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 12:58:44
修改时间 : 2006-12-16 12:58:45
访问时间 : 2006-12-16 13:5:1
大小 : 71168 字节 69.512 KB
MD5 : c59fa74fe40dddba162fdb2e397a06cd
Complete scanning result of "cl.exe", received in VirusTotal at 12.16.2006, 06:04:27 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSAnti.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 71168 bytes
MD5: c59fa74fe40dddba162fdb2e397a06cd
SHA1: 8caa06fa92179af43aff05f415421146f5c04a14
文件说明符 : D:/mh.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 12:59:32
修改时间 : 2006-12-16 12:59:32
访问时间 : 2006-12-16 13:5:1
大小 : 40424 字节 39.488 KB
MD5 : ef8cb4c5a3ccf1eff20daf7a53efb8b4
Complete scanning result of "mh.exe", received in VirusTotal at 12.16.2006, 06:17:25 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Agent.NBJ |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 40424 bytes
MD5: ef8cb4c5a3ccf1eff20daf7a53efb8b4
SHA1: e45dee7ff8a4ff941f937aee27b0989b1facaecc
文件说明符 : D:/wl.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 12:59:49
修改时间 : 2006-12-16 12:59:51
访问时间 : 2006-12-16 13:5:1
大小 : 60929 字节 59.513 KB
MD5 : 894967e328b50eae5b34bdacf3bb64fb
Complete scanning result of "wl.exe", received in VirusTotal at 12.16.2006, 06:25:07 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSAnti.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 60929 bytes
MD5: 894967e328b50eae5b34bdacf3bb64fb
SHA1: f99c1edb269040ed4b7b7b47f17622d2534186a3
文件说明符 : D:/zt.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:0:18
修改时间 : 2006-12-16 13:0:18
访问时间 : 2006-12-16 13:5:1
大小 : 62976 字节 61.512 KB
MD5 : 299365637265e2cbeea2076ead46732f
Complete scanning result of "zt.exe", received in VirusTotal at 12.16.2006, 07:08:48 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Drop.Delf.DU |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.16.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 62976 bytes
MD5: 299365637265e2cbeea2076ead46732f
SHA1: 22aff5ae13aeef3e812720dbe8767b87468c3cff
文件说明符 : D:/jh.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:0:41
修改时间 : 2006-12-16 13:0:42
访问时间 : 2006-12-16 13:5:1
大小 : 83456 字节 81.512 KB
MD5 : 9762fa3face9e03f32af2ed9af3868bb
瑞星Trojan.PSW.Lineage.mnu
Rising___Trojan.PSW.Lineage.mnu---jh.exe
Complete scanning result of "jh.exe", received in VirusTotal at 12.16.2006, 06:11:07 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/PSW.OnLineGames.DE |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | Dropped:Trojan.PWS.OnLineGames.L |
| CAT-QuickHeal | 8.00 | 12.15.2006 | no virus found |
| ClamAV | devel-20060426 | 12.15.2006 | Trojan.Lineage-129 |
| DrWeb | 4.33 | 12.15.2006 | Trojan.PWS.Lineage |
| eSafe | 7.0.14.0 | 12.14.2006 | no virus found |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | Trojan.Lineage.alw |
| Fortinet | 2.82.0.0 | 12.16.2006 | no virus found |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | Trojan-PSW.Win32.Delf.FZ |
| Kaspersky | 4.0.2.24 | 12.16.2006 | Trojan-PSW.Win32.OnLineGames.de |
| McAfee | 4920 | 12.15.2006 | PWS-Lineage |
| Microsoft | 1.1804 | 12.15.2006 | PWS:Win32/Wowsteal.gen!A |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | W32/Lineage.AOYA |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | no virus found |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Worm.Viking.1 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 83456 bytes
MD5: 9762fa3face9e03f32af2ed9af3868bb
SHA1: 3e66e284410d4323c77eca213882e4a3b01cf603
文件说明符 : D:/xyqupdate.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:25:39
修改时间 : 2006-12-16 13:25:39
访问时间 : 2006-12-16 13:31:22
大小 : 48249 字节 47.121 KB
MD5 : 1793f871d0a290799b33838266228145
Complete scanning result of "xyqupdate.exe", received in VirusTotal at 12.16.2006, 06:31:04 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | BackDoor.Pomax |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Groger.A!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Oanum.H |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | MalwareScope.Worm.Viking.5 |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Agent.ATOX.dropper |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | Trojan.Downloader |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 48249 bytes
MD5: 1793f871d0a290799b33838266228145
SHA1: cd188cc7c43ecb644ee3d09d0dc65c028abd19ac
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=02be61099366
瑞星报为：Trojan.DL.Agent.bdj
文件说明符 : D:/G_Setup.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:26:2
修改时间 : 2006-12-16 13:26:5
访问时间 : 2006-12-16 13:35:18
大小 : 283360 字节 276.736 KB
MD5 : f22b7e3f07032de537c88a2bd561ab26
Complete scanning result of "G_Setup.exe", received in VirusTotal at 12.16.2006, 06:35:44 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | Generic2.KGP |
| BitDefender | 7.2 | 12.16.2006 | Backdoor.Hupigon.DFL |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Pigeon.5qf!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Pigeon.GK |
| Ewido | 4.0 | 12.15.2006 | Backdoor.Hupigon.dfl |
| Fortinet | 2.82.0.0 | 12.16.2006 | W32/Hupigon.DFL!tr.bdr |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | Backdoor.Win32.Hupigon.dfl |
| Kaspersky | 4.0.2.24 | 12.16.2006 | Backdoor.Win32.Hupigon.dfl |
| McAfee | 4920 | 12.15.2006 | PWS-Lineage |
| Microsoft | 1.1804 | 12.15.2006 | Backdoor:Win32/Hupigon.TS |
| NOD32v2 | 1924 | 12.15.2006 | Win32/Hupigon |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BMZ |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | Backdoor/Hupigon.dfl |
| UNA | 1.83 | 12.15.2006 | Backdoor.Hupigon.78CC |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | Backdoor.Hupigon.DLR |
Aditional Information
File size: 283360 bytes
MD5: f22b7e3f07032de537c88a2bd561ab26
SHA1: a5b685f5ab123cd865ccb750f764445c64192568
瑞星报为：Backdoor.Gpigeon.kwh
文件说明符 : D:/xyqup.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:26:25
修改时间 : 2006-12-16 13:26:26
访问时间 : 2006-12-16 13:40:52
大小 : 102870 字节 100.470 KB
MD5 : d96ad46145f2fb1780c984bb948c7df4
Complete scanning result of "xyqup.exe", received in VirusTotal at 12.16.2006, 06:40:30 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | PSW.Lineage.QE |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | Trojan.PWS.Lineage |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Lineage.0ow!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Lineage.PA |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | PossibleThreat!017039 |
| F-Prot | 3.16f | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | W32/PWStealer.gen1 |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BRP |
| Prevx1 | V2 | 12.16.2006 | Covert.Sys.Exec |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 102870 bytes
MD5: d96ad46145f2fb1780c984bb948c7df4
SHA1: 8c8b230df5f5f366bd84c31e9a635032339fbbb5
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=aed161290275
瑞星报为：Trojan.PSW.XYOnline.ix
文件说明符 : D:/ztup.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:26:45
修改时间 : 2006-12-16 13:26:45
访问时间 : 2006-12-16 13:48:25
大小 : 55808 字节 54.512 KB
MD5 : b3f40eb1ab5da5c8f50a3fc0c414c9bc
Complete scanning result of "ztup.exe", received in VirusTotal at 12.16.2006, 06:48:03 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | HEUR/Malware |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | BackDoor.Pomax |
| eSafe | 7.0.14.0 | 12.14.2006 | no virus found |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.16.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BSY |
| Prevx1 | V2 | 12.16.2006 | Trojan.Downloader |
| Sophos | 4.12.0 | 12.14.2006 | no virus found |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | no virus found |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 55808 bytes
MD5: b3f40eb1ab5da5c8f50a3fc0c414c9bc
SHA1: 9d0399d8e1039ca74d96499c32d419fb2ee7dcf3
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=5ccb62560089
瑞星报为：Trojan.DL.Agent.bdd
文件说明符 : D:/rxup.exe
属性 : A---
获取文件版本信息大小失败!
创建时间 : 2006-12-16 13:27:4
修改时间 : 2006-12-16 13:27:4
访问时间 : 2006-12-16 13:53:50
大小 : 101285 字节 98.933 KB
MD5 : 3796558fc0fa74b97b0eb28985bac73d
Complete scanning result of "rxup.exe", received in VirusTotal at 12.16.2006, 06:53:30 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Lineage.8xk!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Lineage.OZ |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | SPY/Lineage |
| F-Prot | 3.16f | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | W32/PWStealer.gen1 |
| Ikarus | T3.1.0.26 | 12.16.2006 | Worm.Win32.Viking.cv |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 101285 bytes
MD5: 3796558fc0fa74b97b0eb28985bac73d
SHA1: c66f8ac2290580086cb55ead4c2f917b387995a5
几个比较新的恶意程序……AntiVir全报，kaspersky保持沉默的时候多相关推荐
- 99% 的新移动恶意程序是针对 Android
安全公司 F-Secure的2014年Q1报告(PDF)显示,新发现的移动恶意程序绝大多数是针对Google 的开源操作系统Android.这很大程度上是因为Android的市场统治地位,以及版本碎片 ...
- 在Android平台上发现新的恶意程序伪装成杀毒软件挟持设备
Android平台恶意程序:不支付$100隐私就泄漏]6月25日消息,安全公司赛门铁克发布报告,在Android平台上发现新的恶意程序伪装成杀毒软件挟持设备,消费者支付$100才能让设备正常运作.这些 ...
- 网络安全专家发现了一款由微软数字签名的“FiveSys”新恶意程序
导读 Bitdefender 的网络安全专家近日发现了一款名为"FiveSys"的新恶意程序,它是一个 rootkit,实际上是由微软自己进行数字签名的. FiveSys 恶意驱动 ...
- 利用MLAI判定未知恶意程序——里面提到ssl恶意加密流检测使用N个payload CNN + 字节分布包长等特征综合判定...
利用ML&AI判定未知恶意程序 导语:0x01.前言 在上一篇ML&AI如何在云态势感知产品中落地中介绍了,为什么我们要预测未知恶意程序,传统的安全产品已经无法满足现有的安全态势.那么 ...
- 脚本类恶意程序分析技巧汇总
文章目录 前言 python样本分析 打包一个hello world 关于python文件 什么是pyc文件 什么是pyo文件 什么是pyd文件 为什么需要pyc文件 关于打包的exe位数 pytho ...
- 恶意软件分析实战02-分析3个恶意程序
1. Lab03-01 vt上一搜发现鉴别为恶意软件. 拖到PEID内一查,加了一个壳PEncrypt 3.1 Final -> jnukcode. 我好气,脱了我一个多小时没脱下来.想想算了, ...
- 病毒木马查杀实战第026篇：“白加黑”恶意程序研究（上）
前言 众所周知,传统的恶意程序都是由单一文件构成的.从而实现某一种或者几种恶意功能. 而这类的恶意程序为了避免被发现以及被查杀,往往会採用五花八门的自我隐藏技术以及免杀技术,病毒程序的作者非常多时候也 ...
- 病毒木马查杀实战第027篇：“白加黑”恶意程序研究（中）
前言 这次讨论的是一个真实的非常典型的利用"白加黑"手段进行破坏的团伙,我能深刻地感受到它们在很多方面确实是花了一些心思的,也就是在隐藏自身行为,诱惑纯洁的大众进行点击从而得到运行 ...
- 腾讯市值1个月蒸发1700亿美元；微软发布Windows 11 首个Beta版本； 恶意程序开发者转向新兴编程语言 | 架构视点...
推荐大家关注一个公众号 点击上方 "编程技术圈"关注, 星标或置顶一起成长 后台回复"大礼包"有惊喜礼包! 每日英文 It doesn't matter how ...
最新文章
- 数据库综合系列 之 存储过程
- python 当前文件路径获取方式_Python获取当前文件路径
- CSS文字或元素的水平垂直居中多种方式（简单明了）
- pps服务器未响应_pps服务器未响应停止播放怎么解决
- JVM中的垃圾收集算法
- 蓝桥杯 ADV-70 算法提高 冒泡法排序
- R-查询子段元素和 提前储存
- 【转载】三角形测试用例
- 2013北理机试题——中缀算术表达式对应二叉树的先序遍历
- linux上2048游戏程序,如何在Ubuntu中安装2048游戏
- cad 打开硬件加速卡_如何提高CAD运行速度
- Android 最常用的设计模式二 安卓源码分析——组合模式（component）
- 《1818黄金眼》将与bilibili合作：两大快乐源泉要合体了
- win10 无法查看工作组计算机名,win10系统无法查看工作组计算机的技巧
- Pytorch问题及解决：‘lengths‘ argument should be a 1D CPU int64 tensor, but got 1D cuda:0 Long tensor
- 三菱FX5U多冲一切追剪程序。 无需40SSC运动模块，通过软件电子凸轮算法实现追剪功能
- Quartus Prime 软件 USB-blaster 驱动安装失败【已解决】
- 如何像伟大的企业家一样写作
- VS2015 还是VS2017 好用_强烈推荐：2020年12款Visual Studio 好用的工具
- 2022-2027年中国海洋油气开采行业市场全景评估及发展战略规划报告