11.23malware tip样本

诸葛亮

样本地址链接：http://pan.baidu.com/s/1hqw06Rq 密码：m66a

http://www14.zippyshare.com/v/13354175/file.html

解压密码：infected

@天蓝色的忧伤

转自http://malwaretips.com/threads/2014-11-23-14.37915/


一个14个红伞扫描kill 7个
双击：一个不兼容系统，apc kill 3个

蓝天二号

KIS   KILL 9X






再次扫描 又KILL 四个

截图 截了3个




剩余 4个

欧阳宣

咖啡剩余5个。
[mw_shl_code=html,true]11/23/2014        7:34:22 PM        "E:\virus\14files\3a4ab7084fe967a029f3c54ab7f9cf52"        "Artemis!3A4AB7084FE9"        "2"

11/23/2014        7:34:22 PM        "E:\virus\14files\dfc62bf940177bc0cdae3e5cf903e733"        "Artemis!DFC62BF94017"        "2"

11/23/2014        7:34:23 PM        "E:\virus\14files\2bb6e868da68a42526b4c28e882869dd"        "Artemis!2BB6E868DA68"        "2"

11/23/2014        7:34:25 PM        "E:\virus\14files\67e7aa18afd760fe114536b8750cee6b"        "Artemis!67E7AA18AFD7"        "2"

11/23/2014        7:34:26 PM        "E:\virus\14files\56d50c26e94a095a52d374b4caa78814"        "Artemis!56D50C26E94A"        "2"

11/23/2014        7:34:26 PM        "E:\virus\14files\06b8e4552f1c5eac7f3ae1f35bf377ee"        "Artemis!06B8E4552F1C"        "2"
11/23/2014        7:33:56 PM        "E:\virus\14files\51484eb787f34d278dc24166c1a60ea3"        "Artemis!51484EB787F3"        "2"

11/23/2014        7:33:56 PM        "E:\virus\14files\59f10f887b6dac053f6ae97641c553f5"        "Artemis!59F10F887B6D"        "1"

11/23/2014        7:33:56 PM        "E:\virus\14files\bcff6f343bdac2786c2ecdda04429899"        "Trojan-FDWX!BCFF6F343BDA"        "2"[/mw_shl_code]

yangpizhi

AVG Kill 7x

[mw_shl_code=css,true]"";"发现 Luhe.Packed.H, D:\59f10f887b6dac053f6ae97641c553f5";"恶意文件"
"";"特洛伊木马 Crypt3.BGWS, D:\2bb6e868da68a42526b4c28e882869dd";"恶意文件"
"";"特洛伊木马 MSIL5.APBG, D:\67e7aa18afd760fe114536b8750cee6b";"恶意文件"
"";"特洛伊木马 MSIL5.BLCD, D:\56d50c26e94a095a52d374b4caa78814";"恶意文件"
"";"特洛伊木马 MSIL5.BRJE, D:\06b8e4552f1c5eac7f3ae1f35bf377ee";"恶意文件"
"";"特洛伊木马 MSIL5.BRJE, D:\7328113a30f0e3451320b665790a12f2";"恶意文件"
"";"特洛伊木马 MSIL5.BSOC, D:\3a4ab7084fe967a029f3c54ab7f9cf52";"恶意文件"
[/mw_shl_code]

dongwenqi

蓝天二号 发表于 2014-11-23 19:33
KIS   KILL 9X

剩余上报

chenxipg

卡巴剩余4个有2个检测出来的但是删不掉。。卡了？

dongwenqi

蓝天二号 发表于 2014-11-23 19:33
KIS   KILL 9X

06b8e4552f1c5eac7f3ae1f35bf377ee,
0c0330d33d7e186a13c52d3d49a96c95,
2177a677bb5f0e84c945ab8c628e9076,
2bb6e868da68a42526b4c28e882869dd,
3c95fceb95097ad4cce22659b6fa9c68,
67e7aa18afd760fe114536b8750cee6b,
7328113a30f0e3451320b665790a12f2,
dfc62bf940177bc0cdae3e5cf903e733

A set of unknown files has been received. They will be sent to the Virus Lab.

3a4ab7084fe967a029f3c54ab7f9cf52 - Trojan.MSIL.Inject.atac
56d50c26e94a095a52d374b4caa78814 - Backdoor.Win32.DarkKomet.edof
59f10f887b6dac053f6ae97641c553f5 - Trojan-Spy.Win32.Zbot.upnv
bcff6f343bdac2786c2ecdda04429899 - Trojan-Dropper.Win32.FrauDrop.ahorp
e38b68c761d0101e34bb67b053717f5d - Trojan.Win32.Autoit.dzn

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

51484eb787f34d278dc24166c1a60ea3 - Trojan-Ransom.Win32.Blocker.gclt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best Regards, Kaspersky Lab

cxy密斯

Dr.web kill 5x，剩余9x

蓝天二号

dongwenqi 发表于 2014-11-23 20:16
06b8e4552f1c5eac7f3ae1f35bf377ee,
0c0330d33d7e186a13c52d3d49a96c95,
2177a677bb5f0e84c945ab8c628e ...

我这边剩余四个，，，你怎么剩那么多？？？？

dongwenqi

蓝天二号 发表于 2014-11-23 20:18
我这边剩余四个，，，你怎么剩那么多？？？？

我不是扫描的，而是全部打包上报的