查看: 1951|回复: 7
收起左侧

[病毒样本] probably unknown PE new virus

[复制链接]
绅博周幸
发表于 2007-10-5 07:49:56 | 显示全部楼层 |阅读模式
a-squared3.0.0.1232007.10.042007-10-04-
40.916
AntiVir7.6.0.187.0.0.462007-10-03TR/Delphi.Downloader.Gen
8.792
Arcavir1.0.42007100320122007-10-03-
5.028
AVAST1.0.8000778-22007-10-03-
8.019
AVG7.5.49.442269.14.1/10502007-10-04-
7.487
BitDefender7.60825.8982407.151062007-10-04-
12.724
CA (VET)8.4.0.2431.2.51872007-10-05-
7.625
ClamAV 0.91.244622007-10-04-
0.058
Comodo2.112.0.0.3032007-09-04-
5.884
Dr.WEB4.332007.10.032007-10-03-
23.229
ewido4.0.0.22007.10.042007-10-04-
3.365
F-PROT4.4.0.50200710042007-10-04Possible W32/Downloader-WebExe-based!Maximus
5.255
F-SECURE5.51.61002007.10.04.012007-10-04-
11.009
IKARUST3.1.1.122007.10.04.696162007-10-04Trojan-Downloader.Win32.Banload.awy
2.250
MKS_VIR2.012007.10.032007-10-03-
6.738
NOD322.70.1025702007-10-03probably unknown NewHeur_PE virus
0.018
NORMAN5.91.085.902007-10-03W32/Downloader.EZN
13.221
nProtect2007-10-04.009628322007-10-04-
41.688
QuickHeal9.002007.10.032007-10-03-
3.501
SOPHOS2.49.14.212007-10-04Mal/DelpDldr-C
12.588
The Hacker6.2.6v000762007-10-02-
6.189
VBA323.12.2.420071003.05092007-10-03Win32.Trojan.Downloader (http://...) (suspicious)
3.400
ViRobot200710042007.10.042007-10-04-
1.217
VirusBuster4.3.19:99.107.6/11.02007-10-03-
4.852
卡巴斯基5.5.102007.10.042007-10-04-
0.054
江民杀毒10.00.6502007.09.302007-09-30-
1.777
熊猫卫士9.04.03.00012007.10.042007-10-04-
8.690
瑞星19.019.43.20.002007-10-03-
2.658
赛门铁克1.3.0.2420071003.0352007-10-03-
0.452
趋势8.500-10014.755.002007-10-02-
0.042
迈克菲5.2.0051332007-10-03-
3.514
金山毒霸2007.6.20.2492007.10.42007-10-04-
2.277
飞塔2.81-3.118.1882007-10-04-
1.378
注意: 就算报告发现病毒,也可能是杀软误报,请根据查毒结果自行判断

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
绅博周幸
 楼主| 发表于 2007-10-5 07:59:49 | 显示全部楼层
This virus sample first appeared in Sep,10th, 2007
29159011
发表于 2007-10-5 08:26:05 | 显示全部楼层
蜘蛛挂了
xjw_1990
发表于 2007-10-5 09:26:06 | 显示全部楼层
卡巴报 恶意软件
微点卫士
发表于 2007-10-5 09:27:40 | 显示全部楼层
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EE.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:1841
远端地址:74.222.130.28(美国)
远端端口:80
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EE.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\OALPQGI0\16[1].EXE
2) D:\TEST.EXE
3) C:\WINDOWS.0\SYSTEM32\CQDOOR0.DLL
是否删除木马程序及其衍生物?

哈哈,这个是活的
wangjay1980
发表于 2007-10-5 09:45:21 | 显示全部楼层
detected: virus Heur.Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ee.rar/ee.exe
uhthn2002
发表于 2007-10-5 10:33:49 | 显示全部楼层

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 305
Paranoia Database - 6837
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\ee.exe

C:\Documents and Settings\uhthn\Desktop\ee.exe - Suspected Win32.Backdoor.Hupigon.5

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted
king6808
发表于 2007-10-5 15:17:33 | 显示全部楼层
已删除:木马程序 Trojan-Downloader.Win32.Delf.cim        文件 : G:\10.5\ee.rar/ee.exe
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-19 19:10 , Processed in 0.135777 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表