vip马

显示全部楼层 · 发表于 2007-9-16 15:06:58

文件 3000.rar 接收于 2007.09.16 08:54:37 (CET)

结果: 0/32 (0%)

反病毒引擎版本最后更新扫描结果
AhnLab-V3 2007.9.14.0 2007.09.14 -
AntiVir 7.6.0.10 2007.09.14 -
Authentium 4.93.8 2007.09.16 -
Avast 4.7.1043.0 2007.09.15 -
AVG 7.5.0.485 2007.09.15 -
BitDefender 7.2 2007.09.16 -
CAT-QuickHeal 9.00 2007.09.15 -
ClamAV 0.91.2 2007.09.16 -
DrWeb 4.33 2007.09.16 -
eSafe 7.0.15.0 2007.09.13 -
eTrust-Vet 31.1.5136 2007.09.14 -
Ewido 4.0 2007.09.15 -
FileAdvisor 1 2007.09.16 -
Fortinet 3.11.0.0 2007.09.16 -
F-Prot 4.3.2.48 2007.09.16 -
F-Secure 6.70.13030.0 2007.09.15 -
Ikarus T3.1.1.12 2007.09.16 -
Kaspersky 4.0.2.24 2007.09.16 -
McAfee 5120 2007.09.14 -
Microsoft 1.2803 2007.09.16 -
NOD32v2 2532 2007.09.16 -
Norman 5.80.02 2007.09.14 -
Panda 9.0.0.4 2007.09.15 -
Prevx1 V2 2007.09.16 -
Rising 19.40.61.00 2007.09.16 -
Sophos 4.21.0 2007.09.16 -
Sunbelt 2.2.907.0 2007.09.15 -
Symantec 10 2007.09.16 -
TheHacker 6.2.5.060 2007.09.14 -
VBA32 3.12.2.4 2007.09.15 -
VirusBuster 4.3.26:9 2007.09.15 -
Webwasher-Gateway 6.0.1 2007.09.14 -
附加信息
File size: 3087 bytes
MD5: 5b5c537ce2c028e3390df61292ec8753
SHA1: a4245aa3d3a3cc25456afb40ffd1b159ee764f23

文件 vip.rar 接收于 2007.09.16 09:00:31 (CET)

结果: 3/32 (9.38%)
反病毒引擎版本最后更新扫描结果
AhnLab-V3 2007.9.14.0 2007.09.14 -
AntiVir 7.6.0.10 2007.09.14 -
Authentium 4.93.8 2007.09.16 -
Avast 4.7.1043.0 2007.09.15 -
AVG 7.5.0.485 2007.09.15 -
BitDefender 7.2 2007.09.16 -
CAT-QuickHeal 9.00 2007.09.15 -
ClamAV 0.91.2 2007.09.16 JS.Downloader-32
DrWeb 4.33 2007.09.16 -
eSafe 7.0.15.0 2007.09.13 JS.Feebs
eTrust-Vet 31.1.5136 2007.09.14 -
Ewido 4.0 2007.09.15 -
FileAdvisor 1 2007.09.16 -
Fortinet 3.11.0.0 2007.09.16 -
F-Prot 4.3.2.48 2007.09.16 -
F-Secure 6.70.13030.0 2007.09.15 -
Ikarus T3.1.1.12 2007.09.16 -
Kaspersky 4.0.2.24 2007.09.16 -
McAfee 5120 2007.09.14 -
Microsoft 1.2803 2007.09.16 -
NOD32v2 2532 2007.09.16 -
Norman 5.80.02 2007.09.14 -
Panda 9.0.0.4 2007.09.15 -
Prevx1 V2 2007.09.16 -
Rising 19.40.61.00 2007.09.16 -
Sophos 4.21.0 2007.09.16 -
Sunbelt 2.2.907.0 2007.09.15 -
Symantec 10 2007.09.16 Downloader
TheHacker 6.2.5.060 2007.09.14 -
VBA32 3.12.2.4 2007.09.15 -
VirusBuster 4.3.26:9 2007.09.15 -
Webwasher-Gateway 6.0.1 2007.09.14 -
附加信息
File size: 6546 bytes
MD5: ccc14fb940291a2039ac3bbc34d7d72f
SHA1: 6a56175a7dd830a1287ac710c9ac21a5bd8a1f16

显示全部楼层 · 发表于 2007-9-16 15:09:54

几乎全军覆没

显示全部楼层 · 发表于 2007-9-16 15:12:48

这两只费尔爆：Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-09-16 14:47:34,JS.Decoder.z,病毒,小飞侠.net,C:\Documents and Settings\小飞侠.net\Local Settings\Temporary Internet Files\Content.IE5\GPE70LIV\vip[1].htm,Realtime scan
2007-09-16 14:47:33,JS.Decoder.n,病毒,小飞侠.net,C:\Documents and Settings\小飞侠.net\Local Settings\Temporary Internet Files\Content.IE5\KDM38PER\3000_5[1].htm,Realtime scan

显示全部楼层 · 发表于 2007-9-16 16:03:40

卡巴的主防也过了???

显示全部楼层 · 发表于 2007-9-16 16:16:55

3000解密后……

显示全部楼层 · 发表于 2007-9-16 16:17:29

这个也是MS06014的

显示全部楼层 · 发表于 2007-9-16 16:20:44

原帖由 xqiafl 于 2007-9-16 16:03 发表
卡巴的主防也过了???

我没有安装主动防御，你试试，再随手附上隔壁帮我提的样本。。。挂了不少。。。

反病毒引擎版本最后更新扫描结果
AhnLab-V3 2007.9.14.0 2007.09.14 -
AntiVir 7.6.0.10 2007.09.14 DR/Delphi.Gen
Authentium 4.93.8 2007.09.16 -
Avast 4.7.1043.0 2007.09.15 Win32:Delf-FFN
AVG 7.5.0.485 2007.09.15 -
BitDefender 7.2 2007.09.16 Generic.PWStealer.18BFA9E1
CAT-QuickHeal 9.00 2007.09.15 -
ClamAV 0.91.2 2007.09.16 -
DrWeb 4.33 2007.09.16 -
eSafe 7.0.15.0 2007.09.13 suspicious Trojan/Worm
eTrust-Vet 31.1.5136 2007.09.14 -
Ewido 4.0 2007.09.15 -
FileAdvisor 1 2007.09.16 -
Fortinet 3.11.0.0 2007.09.16 -
F-Prot 4.3.2.48 2007.09.16 -
F-Secure 6.70.13030.0 2007.09.15 -
Ikarus T3.1.1.12 2007.09.16 Generic.PWStealer
Kaspersky 4.0.2.24 2007.09.16 Trojan-Spy.Win32.Delf.aiv
McAfee 5120 2007.09.14 PWS-QQPass.dll
Microsoft 1.2803 2007.09.16 TrojanDropper:Win32/Dowque.A
NOD32v2 2532 2007.09.16 a variant of Win32/PSW.Delf.NIY
Norman 5.80.02 2007.09.14 -
Panda 9.0.0.4 2007.09.15 Suspicious file
Prevx1 V2 2007.09.16 Malware.Gen
Rising 19.40.61.00 2007.09.16 -
Sophos 4.21.0 2007.09.16 Mal/Dloadr-B
Sunbelt 2.2.907.0 2007.09.15 -
Symantec 10 2007.09.16 Infostealer
TheHacker 6.2.5.060 2007.09.14 -
VBA32 3.12.2.4 2007.09.15 MalwareScope.Trojan-PSW.Game.7
VirusBuster 4.3.26:9 2007.09.15 Trojan.PWS.QQGame.Gen
Webwasher-Gateway 6.0.1 2007.09.14 Trojan.Delphi.Gen
附加信息
File size: 39902 bytes
MD5: d6dd0d8417c08f3094e864bfb9e2a3e9
SHA1: 34d963a91afc88127d1524800a850e4038eaafdb
packers: UPX
packers: UPX, UPX
packers: UPX, BINARYRES, UPX, BINARYRES
packers: UPX

显示全部楼层 · 发表于 2007-9-16 16:28:59

原帖由 小飞侠.net 于 2007-9-16 15:12 发表
这两只费尔爆：Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-09-16 14:47:34,JS.Decoder.z,病毒,小飞侠.net,C:\Documents and Settings\小飞侠.net\Local Settings\Temporary Internet Files\Content. ...

fil是只要加密就报的……

显示全部楼层 · 发表于 2007-9-16 16:59:26

2007-9-16 16:58:51 Scanning Log
2007-9-16 16:58:51 Version of virus signature database: 2532 (20070916)
2007-9-16 16:58:51 Date: 16.9.2007 Time: 16:58:51
2007-9-16 16:58:51 Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\1613.rar
2007-9-16 16:58:51 D:\Documents and Settings\EKINCHENG\桌面\1613.rar » RAR » New Folder\microsofts.bat - a variant of Win32/PSW.Delf.NIY trojan
2007-9-16 16:58:51 D:\Documents and Settings\EKINCHENG\桌面\1613.rar » RAR » New Folder\vip.exe - a variant of Win32/PSW.Delf.NIY trojan
2007-9-16 16:58:51 Number of scanned files: 3
2007-9-16 16:58:51 Number of threats found: 2
2007-9-16 16:58:51 Time of completion: 16:58:51 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-16 17:04:22

开了影子试试。。。

[病毒样本] vip马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源