1.30

显示全部楼层 · 发表于 2012-1-30 20:24:25

样本地址:http://MSZXM1973.qjwm.com/down_1827964.html
http://www.vdisk.cn/down/index/9533401A9150
样本密码:virus
样本数量:50

显示全部楼层 · 发表于 2012-1-30 20:28:57

本帖最后由 liwnpin 于 2012-1-30 20:38 编辑

占位测试

解压微点主防杀17个，扫描杀5个，红伞补杀15个，金山卫士再补6个余下7个MISS

显示全部楼层 · 发表于 2012-1-30 20:44:15

大蜘蛛发现36个：

扫描统计：
Total 22905202 bytes in 50 files scanned (342 objects)
Total 14 files (305 objects) are clean
Total 36 files are infected
Scan time is 00:00:14
余下已上报！

显示全部楼层 · 发表于 2012-1-30 20:53:41

ESET kill 40x 余下2x提示没法解压

To ESET

显示全部楼层 · 发表于 2012-1-30 21:00:11

liwnpin 发表于 2012-1-30 20:28
占位测试
解压微点主防杀17个，扫描杀5个，红伞补杀15个，金山卫士再补6个余下7个MISS

双击。大叔

显示全部楼层 · 发表于 2012-1-30 21:32:17

File ID    Filename    Size (Byte) Result
26543250    1.30.rar 0 Byte OK
A listing of files contained inside archives alongside their results can be found below:
File ID    Filename    Size (Byte) Result
26543251    (6).exe    1.25 MB    UNDER ANALYSIS
26543222    (1).exe    1.41 MB    UNDER ANALYSIS
26543252    (2).exe    1.33 MB    UNDER ANALYSIS
26543253    (4).exe    1.29 MB    UNDER ANALYSIS
26543254    (5).exe    1.25 MB    UNDER ANALYSIS
26543220    (7).exe    929.43 KB    UNDER ANALYSIS
26543303    (8).exe    599.38 KB    RISK
26543304    (12).exe    175.48 KB    UNDER ANALYSIS
26543218    (13).exe    161.19 KB    UNDER ANALYSIS
26543216    111    150.39 KB    UNDER ANALYSIS
26543214    sd    162.61 KB    UNDER ANALYSIS
26531694    winzip155.exe    236.08 KB    UNDER ANALYSIS
26543211    zz    124.11 KB    UNDER ANALYSIS
45962777    IvyBot_v3.0.exe    1.31 MB    KNOWN CLEAN

显示全部楼层 · 发表于 2012-1-30 21:49:19

卡巴 miss 19x~

显示全部楼层 · 发表于 2012-1-30 21:54:39

Malcide Scanner
Version - 1.0.532
Genetic Database - 2012/1/30 21:39:52
Urgent Database - 2012/1/30 21:39:33

Scanning now...
Date - 2012/1/30 Time - 21:52:28
Target:
C:\Users\Gateway\Desktop\1.30

C:\Users\Gateway\Desktop\1.30\%E_2010494687-.zip.exe - HEUR: Win32.Worm.DualExtensions
C:\Users\Gateway\Desktop\1.30\(1).exe > NSIS > adm33.dll - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(1).exe > NSIS > adm40.dll - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(1).exe > NSIS > script.bin - Generic: NSIS.Trojan.StartPage
C:\Users\Gateway\Desktop\1.30\(1).exe > NSIS > $INSTDIR\adm33.dll - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(1).exe > NSIS > $INSTDIR\adm40.dll - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(11).exe - HEUR: Win32.Virus.Suspect-EP.1
C:\Users\Gateway\Desktop\1.30\(12).exe - HEUR: Win32.Trojan-Dropper
C:\Users\Gateway\Desktop\1.30\(2).exe > NSIS > MAME.exe - decompression error (UPX)
C:\Users\Gateway\Desktop\1.30\(2).exe > NSIS > script.bin - Generic: NSIS.Trojan.StartPage
C:\Users\Gateway\Desktop\1.30\(2).exe > NSIS > $INSTDIR\MAME.exe - decompression error (UPX)
C:\Users\Gateway\Desktop\1.30\(5).exe > NSIS > script.bin - Generic: NSIS.Trojan.StartPage
C:\Users\Gateway\Desktop\1.30\(5).exe > NSIS > UHARC.EXE > UPX - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(5).exe > NSIS > $INSTDIR\UHARC.EXE > UPX - HEUR: Win32.Packed.EP-Crypt
C:\Users\Gateway\Desktop\1.30\(7).exe > NSIS > script.bin - Generic: NSIS.Trojan.StartPage
C:\Users\Gateway\Desktop\1.30\(8).exe > UPX - HEUR: Win32.Trojan-Dropper
C:\Users\Gateway\Desktop\1.30\111 - decompression error (UPX)
C:\Users\Gateway\Desktop\1.30\111.exe - Win32.Trojan-Downloader.VB.PMH
C:\Users\Gateway\Desktop\1.30\141.157.195.21.18805.exe - Win32.Trojan.Agobot.3.AEQ
C:\Users\Gateway\Desktop\1.30\2.exe - Win32.Trojan-Downloader.Agent.QJD
C:\Users\Gateway\Desktop\1.30\22.09.exe - Win32.Worm.AutoRun.IRCBot.DI
C:\Users\Gateway\Desktop\1.30\3481.exe - Variant: Win32.Trojan-Proxy.Wintu
C:\Users\Gateway\Desktop\1.30\86.exe - HEUR: Win32.Trojan-Dropper.RarSfx
C:\Users\Gateway\Desktop\1.30\addend2.exe - Variant: Win32.Adware.Kraddare.CZ
C:\Users\Gateway\Desktop\1.30\boleto122011.exe - Win32.Trojan.Spy.Delf.OJR
C:\Users\Gateway\Desktop\1.30\c9.exe - Variant: Win32.Trojan-PSW.OnLineGames.QNT
C:\Users\Gateway\Desktop\1.30\datest.exe - Generic: Win32.Trojan-PSW.IEPass
C:\Users\Gateway\Desktop\1.30\https.exe - IRC.Trojan.SdBot
C:\Users\Gateway\Desktop\1.30\ipscan.exe - IRC.SdBot.RB
C:\Users\Gateway\Desktop\1.30\IvyBot_v3.0.exe - Variant: Win32.Malware
C:\Users\Gateway\Desktop\1.30\jj.exe - Win32.Trojan.Poison.NAE
C:\Users\Gateway\Desktop\1.30\lcfg32.exe - Win32.Trojan.Rbot
C:\Users\Gateway\Desktop\1.30\nc.exe - Win32.Virus.Alman.NAB
C:\Users\Gateway\Desktop\1.30\PreLoader_59fast.exe - Win32.Trojan.Kryptik.YWE
C:\Users\Gateway\Desktop\1.30\qn.exe - Win32.Trojan-PSW.Kykymber.AA TROJAN
C:\Users\Gateway\Desktop\1.30\SAMDUMP.EXE - Win32.PSWTool.SAMDump.104
C:\Users\Gateway\Desktop\1.30\sd - HEUR: Win32.Trojan.EPO-Crypt.1
C:\Users\Gateway\Desktop\1.30\seksdialer.exe - UDB: Win32.Malware.12F
C:\Users\Gateway\Desktop\1.30\task.exe - Win32.Trojan-Downloader.Agent.RBQ
C:\Users\Gateway\Desktop\1.30\tlbb.exe - Variant: Win32.Trojan-PSW.OnLineGames
C:\Users\Gateway\Desktop\1.30\winzip155.exe - Win32.Adware.OpenInstall
C:\Users\Gateway\Desktop\1.30\wnetlib.exe - IRC.SdBot.DF
C:\Users\Gateway\Desktop\1.30\x9.exe - Win32.Trojan.Cloud.Suspicious
C:\Users\Gateway\Desktop\1.30\xr.exe - Win32.Trojan-PSW.OnLineGames.PUH
C:\Users\Gateway\Desktop\1.30\zt.exe - Win32.Trojan-PSW.OnLineGames.PJS TROJAN
C:\Users\Gateway\Desktop\1.30\zx.exe - Variant: Win32.Trojan-PSW.OnLineGames

771 Objects scanned
30 Malicious objects found
7 Suspicious objects found
37 Threats found

Finish time - 21:54:02
Duration - 94 second(s) (00:01:34)

显示全部楼层 · 发表于 2012-1-30 21:57:21

本帖最后由 yestersummer 于 2012-1-30 21:59 编辑

360kill40，二扫又干掉2个！

显示全部楼层 · 发表于 2012-1-30 22:00:25

红伞剩余13个

[病毒样本] 1.30

评分

本帖子中包含更多资源

评分