5个

显示全部楼层 · 发表于 2008-1-26 11:17:04

from:
hxxp://208.66.194.180/40e8001430303030303030303030303030303030303031306c0000003c66000000007600000002
hxxp://208.66.195.15/40e8001430303030303030303030303030303030303031306c0000003c66000000007600000002
hxxp://208.66.195.165/40e8001430303030303030303030303030303030303031306c0000003c66000000007600000002
hxxp://208.66.194.180/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002
hxxp://208.66.195.15/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002
hxxp://208.66.195.165/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002
hxxp://208.66.195.71/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002

,etc

显示全部楼层 · 发表于 2008-1-26 11:27:24

1个

C:\Users\Wesley\Downloads\lfn.rar
  [0] Archive type: RAR
  --> 40e8001430303030303030303030303030303030303031306c000000fc66000000007600000002
   [DETECTION] Contains detection pattern of the worm WORM/Ntech.Z.4

显示全部楼层 · 发表于 2008-1-26 11:27:30

Starting the file scan:

Begin scan in 'E:\lfn.rar'
E:\lfn.rar
  [0] Archive type: RAR
  --> 40e8001430303030303030303030303030303030303031306c000000fc66000000007600000002
   [DETECTION] Contains detection pattern of the worm WORM/Ntech.Z.4
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-1-26 11:45:48

大蜘蛛全miss

显示全部楼层 · 发表于 2008-1-26 11:58:18

12
detected: Trojan program Trojan-Dropper.Win32.Agent.dnu File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000008166000000007600000002//data0000.bin
detected: Trojan program Trojan-Downloader.Win32.Agent.ggt File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000008166000000007600000002//data0001.bin//data0001.bin//data0000.bin
deleted: Trojan program Trojan-Dropper.Win32.Agent.dnu File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c000000fc66000000007600000002//EXE-Package
detected: Trojan program Trojan-Dropper.Win32.Agent.dnu File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000003c66000000007600000002//data0000.bin
detected: Trojan program Trojan-Downloader.Win32.Agent.ggt File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000003c66000000007600000002//data0001.bin//data0001.bin
detected: Trojan program Trojan-Dropper.Win32.Agent.dnu File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002//data0000.bin
detected: virus Email-Worm.Win32.Agent.bc File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002//data0001.bin//data0000.bin
detected: Trojan program Trojan-Downloader.Win32.Agent.ggt File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000004d66000000007600000002//data0001.bin//data0001.bin
detected: Trojan program Trojan-Dropper.Win32.Agent.dnu File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000001266000000007600000002//data0000.bin
detected: virus Email-Worm.Win32.Agent.bc File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000001266000000007600000002//data0001.bin//data0000.bin
detected: Trojan program Trojan.Win32.Agent.ady File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000001266000000007600000002//data0001.bin//data0001.bin//data0000.bin
detected: Trojan program Trojan-Downloader.Win32.Agent.ggt File: C:\Documents and Settings\Administrator\×ÀÃæ\lfn.rar/40e8001430303030303030303030303030303030303031306c0000001266000000007600000002//data0001.bin//data0001.bin//data0001.bin

显示全部楼层 · 发表于 2008-1-26 12:07:15

ESET miss

显示全部楼层 · 发表于 2008-1-26 12:10:35

kv2008 全部miss

显示全部楼层 · 发表于 2008-1-26 12:23:52

只有5个好像 ..

Win32:Agent-NGJ [Wrm] X 4 .

显示全部楼层 · 发表于 2008-1-26 13:25:24

Rising20.28.50全部过。文件像非PE文件！

显示全部楼层 · 发表于 2008-1-26 13:28:15

应该是PE的有MZ头加个后缀应该就能执行了

[病毒样本] 5个

本帖子中包含更多资源

Avira AntiVir

本帖子中包含更多资源

浏览过的版块