三个IGM病毒，只能查出两个

zonggoj

今天下了分igm病毒样本，开始用卡巴查，只能查两个。把第三个上传到VirSCAN.org上，只有一个报告病毒：

file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot-1.jpghttp://virscan.org/report/0c0a131555f777b388c966fd4de23690.html


大家看看这病毒吧

[ 本帖最后由 zonggoj 于 2008-1-20 10:19 编辑 ]

红心王子

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\igm样本及变种.rar'
C:\Documents and Settings\Administrator\桌面\igm样本及变种.rar
  [0] Archive type: RAR
  --> userinitµÚÒ»¸ö±äÖÖ.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.6
  --> userinitµÚ¶þ¸ö±äÖÖ.exe
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.AV.3
      [WARNING]   The file was ignored!


End of the scan: 2008年1月20日  10:20
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

Graybird

The file 'userinit##########.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows Server 2003 (SP2)'.

ykz1991

王子你也用红伞了
第三个已上报

红心王子

恩
给我老哥装的红伞
最近比较忙

醉一生爱妍

NODK2

其中一个正在测试中

醉一生爱妍

第3个是个下载者

jiangliucn

avast!  直接不允许下载。。。
刚点就提示有毒

zwl2828

C:\Users\Administrator\Downloads\igm样本及变种.rar
  [0] Archive type: RAR
  --> userinitµÚÒ»¸ö±äÖÖ.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.6
  --> userinitµÚ¶þ¸ö±äÖÖ.exe
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.AV.3

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.blm        URL: http://bbs.kafan.cn/attachment.php?aid=186635//userinitµÚÒ»¸ö±äÖÖ.exe