网马一只[MD5: 9B65B0]

显示全部楼层 · 发表于 2007-9-29 23:09:47

最近没什么好玩的样本，大家将就将就
http://www.sokuoo.com/self/ga.exe

显示全部楼层 · 发表于 2007-9-29 23:12:42

显示全部楼层 · 发表于 2007-9-29 23:20:18

Scanning Log
Version of virus signature database: 2559 (20070929)
Date: 29.9.2007 Time: 23:20:21
Scanned disks, folders and files: C:\Documents and Settings\Martin\桌面\样本.rar
C:\Documents and Settings\Martin\桌面\样本.rar » RAR » ga.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 23:20:21 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-29 23:28:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> ga.exe
   [DETECTION] Is the Trojan horse TR/Agent.38959
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-29 23:41:04

卡巴 7.0.0.125 高启发

已检测到: 病毒 Heur.Trojan.Generic (变种) URL: http://bbs.kafan.cn/attachment.php?aid=133540//ga.exe//ASPack

显示全部楼层 · 发表于 2007-9-29 23:43:27

又测起瑞星啦.!

显示全部楼层 · 发表于 2007-9-29 23:44:43

没意思，又是红伞报的。

显示全部楼层 · 发表于 2007-9-29 23:54:43

原帖由 scottxzt 于 2007-9-30 01:13 发表
又测起瑞星啦.!

用瑞星有点像在用EQ的感觉

显示全部楼层 · 发表于 2007-9-30 07:41:40

2007-9-30 7:41:28 1191109288 Administrator 992 Sign of "Win32:Agent-EXD [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本.rar\ga.exe\[ASPack]\[Embedded#04010]\[Embedded#07000]" file.

显示全部楼层 · 发表于 2007-9-30 07:49:34

TR/Agent.38959

[病毒样本] 网马一只[MD5: 9B65B0]

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 solcroft 的帖子