新msn病毒~~自動下載運行

显示全部楼层 · 发表于 2007-9-23 19:13:31

脫了近分半鐘

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 219
Paranoia Database - 5545
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\video.exe

C:\Documents and Settings\uhthn\Desktop\video.exe - Infected with SDB:Backdoor.ircbot.s - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-23 19:14:21

File informationFile Name :    新msn病毒.rar
File Size :    40503 byte
File Type :    RAR archive data, v1d, os
MD5 :    2ad900a35c154d5dbf20ee0149a22c49
SHA1 :    6067d11e0006e27b6192639f2fceed19034c5dfa

Scanner resultsScanner results :    21% Scanner(7/33) found malware!
Time :    2007/09/23 19:09:51 (CST)
Scanner Engine Ver Sig Ver Sig Date Scan result Time
A-Squared 3.0.0.123 2007.09.20 2007-09-20 - 3.905
AntiVir 7.6.0.15 6.39.1.164 2007-09-21 HEUR/Crypted 2.385
Arcavir 1.0.4 200709221155 2007-09-22 - 1.205
Avast 1.0.8 000775-6 2007-09-22 - 3.050
AVG 7.5.49.442 269.13.25/1018 2007-09-19 - 2.035
BitDefender 7.60825.896609 7.14904 2007-09-23 - 3.240
CA (VET) 8.4.0.24 31.2.5154 2007-09-21 - 0.851
ClamAV 0.91.1 4365 2007-09-23 - 0.023
Comodo 2.11 2.0.0.292 2007-09-22 - 1.065
Dr.Web 4.33 2007.09.22 2007-09-22 - 5.298
Ewido 4.0.0.2 2007.09.20 2007-09-20 - 2.186
F-Prot 4.4.0.50 20070922 2007-09-22 - 1.161
F-Secure 5.51.6100 2007.09.21.08 2007-09-21 - 2.734
Fortinet 2.81-3.11 8.138 2007-09-22 W32/IRCBot.AFM!tr.bdr 0.307
ViRobot 20070921 2007.09.21 2007-09-21 - 0.473
Ikarus T3.1.1.12 2007.09.22.69550 2007-09-22 Email-Worm.Win32.Locksky.be 1.346
JiangMin 10.00.650 2007.09.22 2007-09-22 - 0.765
Kaspersky 5.5.10 2007.09.23 2007-09-23 Backdoor.Win32.IRCBot.afm 0.043
KingSoft 2007.6.20.249 2007.9.22 2007-09-22 - 0.850
McAfee 5.2.00 5125 2007-09-21 - 1.012
mks_vir 2.01 2007.09.23 2007-09-23 - 1.919
NOD32 2.70.10 2544 2007-09-21 - 63.752
Norman 5.91.07 5.90 2007-09-21 - 3.345
Panda 9.04.03.0001 2007.09.22 2007-09-22 - 3.987
Trend Micro 8.500-1001 4.733.00 2007-09-20 - 0.736
Quick Heal 9.00 2007.09.21 2007-09-21 Suspicious - DNAScan 2.401
Rising 19.0 19.41.60.00 2007-09-22 Trojan.Win32.Agent.vyl 1.842
Sophos 2.49.1 4.21 2007-09-23 - 3.998
Symantec 1.3.0.24 20070922.023 2007-09-22 - 0.230
nProtect 2007-09-22.00 58093 2007-09-22 - 10.846
The Hacker 6.2.5 v00066 2007-09-22 - 0.710
VBA32 3.12.2.4 20070923.0302 2007-09-23 - 0.728
VirusBuster 4.3.19:9 9.106.5/11.0 2007-09-23 Packed/FRBR 1.046

NOTICE: It may be false positive by some scanners when they found a malware, so you should judge it by yourself.

显示全部楼层 · 发表于 2007-9-23 20:58:17

在偶这里只扫了30S

显示全部楼层 · 发表于 2007-9-23 21:26:00

已删除：木马程序 Backdoor.Win32.IRCBot.afm 文件　: G:\Temp\新msn病毒.rar/video.exe

显示全部楼层 · 发表于 2007-9-23 21:45:51

微点

显示全部楼层 · 发表于 2007-9-24 15:19:42

Begin scan in 'C:\Documents and Settings\dell\桌面\新msn病毒.rar'
C:\Documents and Settings\dell\桌面\新msn病毒.rar
  [0] Archive type: RAR
  --> video.exe
   [DETECTION] Contains detection pattern of the worm WORM/IRCBot.40960.19
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-24 15:31:24

费尔杀了

显示全部楼层 · 发表于 2007-9-24 16:25:21

[:14:]

显示全部楼层 · 发表于 2007-9-24 17:32:22

特征很明显，可也不算太新的毒了

[病毒样本] 新msn病毒~~自動下載運行

本帖子中包含更多资源

喜欢红伞是因为它对于上报病毒的态度!(卡巴也不错)

本帖子中包含更多资源