第一次发样本 我运行了下 惨[07F767]

jianjianliu1983

感染好强

[ 本帖最后由 promised 于 2007-8-24 11:38 编辑 ]

微点卫士

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DRWEB_4_33.EXE
木马程序生成以下文件:
1) E:\VIRUS CHASER\VCRMON.EXE
是否删除木马程序及其衍生物?

居然生成在驱逐舰的文件夹下，这病毒脑子坏拉

欠妳緈諨

下载时

snoopyalex

Starting the file scan:

Begin scan in 'C:\Users\Alex\Desktop\drweb_4_33.zip'
C:\Users\Alex\Desktop\drweb_4_33.zip
  [0] Archive type: ZIP
  --> drweb_4_33.exe
      [DETECTION] Contains signature of the worm WORM/Bagle.IZ.3
      [INFO]      The file was deleted!


End of the scan: 2007年8月24日  11:38
Used time: 00:09 min

The scan has been done completely.

wangjay1980

detected: virus Email-Worm.Win32.Bagle.iz        URL: http://bbs.kafan.cn/attachment.p ... _4_33.exe//PE_Patch

zxy900906

2007-8-24 11:37:58        Scanning Log
2007-8-24 11:37:58        Version of virus signature database: 2481 (20070823)
2007-8-24 11:37:58        Date: 24.8.2007  Time: 11:37:58
2007-8-24 11:37:58        Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\drweb_4_33.zip
2007-8-24 11:37:59        C:\Documents and Settings\Administrator\桌面\drweb_4_33.zip - Win32/Bagle.JC worm - cleaned by deleting - quarantined [1]
2007-8-24 11:37:59        Number of scanned files: 1
2007-8-24 11:37:59        Number of threats found: 1
2007-8-24 11:37:59        Time of completion: 11:37:59  Total scanning time: 1 sec (00:00:01)
2007-8-24 11:37:59       
2007-8-24 11:37:59        Notes:
2007-8-24 11:37:59        [1] File has been deleted as it contained only the virus body.

The EQs

昨天晚上上报给eset了。。。。早上更新就查杀了

红心王子

国内就金山报了，表现不错

a-squared	3.0.0.123	2007.08.23	2007-08-23	-	6.166
Arcavir	1.0.4	200708231034	2007-08-23	-	1.230
AVAST	1.0.8	000768-1	2007-08-24	-	3.053
AVG	7.5.48.442	269.12.4/969	2007-08-23	I-Worm/Bagle.WX	1.994
BitDefender	7.60825.814427	7.14468	2007-08-24	Worm.Win32.Bagle.FX@mm	2.933
CA (VET)	8.4.0.24	31.1.5083	2007-08-24	-	1.469
ClamAV	0.91.1	4047	2007-08-24	-	0.148
ewido	4.0.0.2	2007.08.23	2007-08-23	-	6.021
F-SECURE	5.51.6100	2007.08.23.06	2007-08-23	Email-Worm.Win32.Bagle.iz	2.738
IKARUS	T3.1.1.12	2007.08.23.69387	2007-08-23	-	20.257
MKS_VIR	2.01	2007.08.23	2007-08-23	-	2.115
NOD32	2.70.8	2481	2007-08-23	Win32/Bagle.JC worm	0.004
nProtect	2007-08-23.00	37084	2007-08-23	Worm.Win32.Bagle.FX@mm	8.800
QuickHeal	9.00	2007.08.23	2007-08-23	-	2.979
SOPHOS	2.47.0	4.19	2007-08-24	-	3.220
VBA32	3.12.2.3	20070822.2130	2007-08-22	-	2.292
VirusBuster	4.3.19:9	9.099.2/11.0	2007-08-23	-	1.349
冰岛杀毒	3.16.16	2007.08.23	2007-08-23	-	0.487
卡巴斯基	5.5.10	2007.08.24	2007-08-24	Email-Worm.Win32.Bagle.iz	0.079
大蜘蛛	4.33	2007.08.23	2007-08-23	Win32.HLLM.Beagle	4.817
小红伞	7.4.1.63	6.39.1.38	2007-08-23	Worm/Bagle.IZ.3	2.278
江民杀毒	10.00.650	2007.08.23	2007-08-23	-	1.241
熊猫卫士	9.00.00	2007.08.23	2007-08-23	-	4.499
瑞星	19.0	19.37.40.00	2007-08-23	-	4.175
诺曼	5.91.04	5.90	2007-08-23	-	9.955
赛门铁克	1.3.0.24	20070823.021	2007-08-23	-	0.329
趋势	8.500-1001	4.667.00	2007-08-22	-	0.200
迈克菲	5.1.00	5104	2007-08-23	New Poly Win32	1.519
金山毒霸	2007.6.20.249	2007.8.24	2007-08-24	Worm.Beagle.np.53252	0.831

欠妳緈諨

这次ESET效率不错AVAST飘了金山杀

The EQs

[:27:] [:27:] [:27:] 邮件蠕虫感染率极高。。。。。。