查看: 2566|回复: 12
收起左侧

[病毒样本] 【f9e38b 7cf2d4 6f8acf 6ea355】四只

[复制链接]
jimmyleo
发表于 2007-9-8 22:39:21 | 显示全部楼层 |阅读模式
来源
http://bbs.kafan.cn/viewthread.php?tid=126638&extra=page%3D1&page=1

真够惨的

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
taihuxian
发表于 2007-9-8 22:41:54 | 显示全部楼层
HEUR/Malware
woai_jolin
发表于 2007-9-8 22:43:40 | 显示全部楼层
已删除:木马程序 Trojan-Downloader.Win32.Delf.bzy        文件 : F:\v\exe.rar/qq.exe//PE_Patch
已删除:木马程序 Trojan-Downloader.VBS.Small.ep        文件 : F:\v\exe.rar/down1.exe//UPX//WScript
已删除:木马程序 Trojan-Downloader.Win32.Injecter.f        文件 : F:\v\exe.rar/pps.exe
capsshift
发表于 2007-9-8 22:44:37 | 显示全部楼层
红伞只能查出三个。
Starting the file scan:

Begin scan in 'C:\Users\lenovo\Downloads\exe.rar'
C:\Users\lenovo\Downloads\exe.rar
  [0] Archive type: RAR
  --> qq.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> pps.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Injecter.F
  --> 1.exe
      [DETECTION] Contains detection pattern of the worm WORM/Viking.DLL.2
      [INFO]      The file was moved to '4747b5b3.qua'!


End of the scan: 2007年9月8日  22:44
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      2 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
浪滔天
发表于 2007-9-8 22:46:43 | 显示全部楼层
卡巴 7.0.0.125 高启发

已隔离: 病毒 Heur.Trojan.Generic (变种)        文件: J:\exe\1.exe
已删除: 木马程序 Trojan-Downloader.VBS.Small.ep        文件: J:\exe\down1.exe//UPX//WScript
已删除: 木马程序 Trojan-Downloader.Win32.Injecter.f        文件: J:\exe\pps.exe
已删除: 木马程序 Trojan-Downloader.Win32.Delf.bzy        文件: J:\exe\qq.exe//PE_Patch
残缺的唯美
发表于 2007-9-8 22:52:35 | 显示全部楼层
Scan performed at: 2007-9-8 22:52:08
Scanning Log
NOD32 version 2514 (20070908) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\exe.rar

Date: 8.9.2007  Time: 22:52:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\exe.rar
D:\Documents and Settings\EKINCHENG\桌面\exe.rar ?RAR ?qq.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\exe.rar ?RAR ?pps.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\exe.rar ?RAR ?1.exe - probably a variant of Win32/Viking virus
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 22:52:10 Total scanning time: 1 sec (00:00:01)
uhthn2002
发表于 2007-9-8 23:23:41 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3949
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\qq.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\down1.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\pps.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\1.exe - Suspicious of Win32.Worm.Viking.2

4 Files scanned
0 Infected files found
4 Suspicious files found
0 Files cured
0 Files deleted
小邪邪
发表于 2007-9-8 23:35:08 | 显示全部楼层
AVK杀

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
自由
发表于 2007-9-8 23:42:52 | 显示全部楼层
其中一个微点挂。。。。
另3个KO
老贩子
发表于 2007-9-8 23:51:33 | 显示全部楼层
kis7.0.0.125链接下载就报毒,拒绝下载
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-16 23:54 , Processed in 0.123599 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表