精睿7月2日样本

显示全部楼层 · 发表于 2011-7-2 11:36:40

http://u.115.com/file/cln65pkg# 样本.rar

密码:vc52

显示全部楼层 · 发表于 2011-7-2 11:47:04

File ID Filename Size (Byte) Result
26206017 2011702(57).vc52 752 KB UNDER ANALYSIS
26206018 2011702(6).vc52 764.72 KB UNDER ANALYSIS
26206019 2011702(7).vc52 1.34 MB UNDER ANALYSIS
26206020 2011702(20).vc52 60.25 KB UNDER ANALYSIS
26206021 2011702(21).vc52 25.9 KB UNDER ANALYSIS
26206022 2011702(35).vc52 28.03 KB UNDER ANALYSIS
26206023 2011702(42).vc52 717.5 KB UNDER ANALYSIS
26206024 2011702(49).vc52 32 KB UNDER ANALYSIS
26206025 2011702(52).vc52 13.09 KB UNDER ANALYSIS
1065768 2011702(29).vc52 51 KB KNOWN CLEAN

显示全部楼层 · 发表于 2011-7-2 11:57:25

本帖最后由 z2009 于 2011-7-2 12:23 编辑

红伞占位

红伞余11个
毒霸2012 余11个

红伞加毒霸2012 余7个

显示全部楼层 · 发表于 2011-7-2 12:03:25

本帖最后由 a256886572008 于 2011-7-2 16:21 编辑

CAV 殺了這些

剩下

--------------------------------------------------------------
8.exe 只是自解壓程序，內部無PE文件，非病毒

---------------------------------
21.exe 非可執行

----------------------------------
29.exe，comodo 官方說safe

http://camas.comodo.com/cgi-bin/ ... 1a845a2f5d06a2cda9b

• Verdict
Auto Analysis Verdict
Suspicious

• Description
Suspicious Actions Detected

-------------------------------------------------------------
34.exe

http://camas.comodo.com/cgi-bin/ ... 0e2afac221f4d58a1f0

• Verdict
Auto Analysis Verdict
Suspicious

• Description
Suspicious Actions Detected
Copies self to other locations
Creates files in program files directory
Creates files in windows system directory
Copies self to other locations

-------------------------------------------------------------------
35.exe 非可執行

--------------------------------------------------------
39.exe

CIMA 沒反應

--------------------------------------------------------
42.exe

http://camas.comodo.com/cgi-bin/ ... 7d05995288e63cb0e3f

• Verdict
Auto Analysis Verdict
Suspicious+

• Description
Suspicious Actions Detected
Creates autorun records
Creates files in windows system directory
Creates system services or drivers
Load system drivers

-----------------------------------------------------------------
46.exe 49.exe 52.exe 59.exe 60.exe 62.exe 非可執行

-----------------------------------------------------------------------
comodo 雲查殺

2011-07-02 16:18:23 c:\documents and settings\roger\桌面\virus\样本\2011702(42).exe
.Heur.Suspicious@1

显示全部楼层 · 发表于 2011-7-2 12:22:44

17x to avast!

显示全部楼层 · 发表于 2011-7-2 12:25:37

毒霸剩余11个。

显示全部楼层 · 发表于 2011-7-2 12:27:38

ESET miss 19x
Avira补充 10x
剩余9x

显示全部楼层 · 发表于 2011-7-2 12:36:08

26206020    2011702(20).vc52    60.25 KB    UNDER ANALYSIS
26206021    2011702(21).vc52    25.9 KB    UNDER ANALYSIS
26206022    2011702(35).vc52    28.03 KB    UNDER ANALYSIS
26206023    2011702(42).vc52    717.5 KB    UNDER ANALYSIS
26206024    2011702(49).vc52    32 KB    UNDER ANALYSIS
26206025    2011702(52).vc52    13.09 KB    UNDER ANALYSIS
26206017    2011702(57).vc52    752 KB    UNDER ANALYSIS
26206018    2011702(6).vc52    764.72 KB    UNDER ANALYSIS
26206019    2011702(7).vc52    1.34 MB    UNDER ANALYSIS
1065768    2011702(29).vc52    51 KB    KNOWN CLEAN

显示全部楼层 · 发表于 2011-7-2 12:45:49

360安全卫士扫描剩下13个，金山毒霸11，小红伞11

显示全部楼层 · 发表于 2011-7-2 12:46:45

ESET 2011/7/2 12:44:09 D:\Backup\我的文档\下载\样本\样本 75 35 35 已完成

[病毒样本] 精睿7月2日样本

本帖子中包含更多资源