求分析这4个可疑文件

Ｍy↘じ★ve

hx1997 发表于 2012-6-16 22:54
abc.exe 是个 404 页，不是病毒...

360 报了？？

o,我只用360的压缩，360压缩报了，但是他没有标明哪个报，哪个没报、、、都在右上角统一显示了。
ABC.EXE就是觉得动作有点猥琐。。。

Dust-;羅錠

大蜘蛛killed 1x：

余下3x已上报。

Nocria

Please find a detailed report concerning each individual sample below:

Filename   Result
si[1].exe   MALWARE

The file 'si[1].exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dropper.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. This file is detected by a special detection routine from the engine module.

Filename    Result
t1218.exe  MALWARE

The file 't1218.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Black.Gen2. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection is added to our virus definition file (VDF) starting with version .

Filename          Result
applefalse.exe   MALWARE

The file 'applefalse.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Downloader.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. This file is detected by a special detection routine from the engine module.

Filename   Result
abc.exe    KNOWN CLEAN

The file 'abc.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'PP 3.1 Beta 0802'.

Nocria

Dear Depp,

Thank you for your submission.
The detection for this threat will be included in our next signature update.

si[1].exe - Win32/TrojanDownloader.Agent.RGQ trojan
t1218.exe - Win32/TrojanDownloader.Agent.RGQ trojan
applefalse.exe - Win32/TrojanDownloader.Agent.REK trojan

Regards,

ESET Malware Response Team