楼主: mofunzone
收起左侧

[病毒样本] 如果jotti的nod32没坏,nod32又飞了

[复制链接]
leonfg
发表于 2008-2-2 10:47:41 | 显示全部楼层
刚刚的更新倒是有条鸽子,但是不是这个
kkgh
发表于 2008-2-2 10:52:56 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Packer.RyCrypt           

用户来源:互联网

软件版本:20.29.42
微点卫士
发表于 2008-2-2 10:56:53 | 显示全部楼层
加壳

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
花间酒
发表于 2008-2-2 10:57:06 | 显示全部楼层
create EXPL0RER.exe
install service..

gho
发表于 2008-2-2 13:38:36 | 显示全部楼层
扫描报告
2008年2月2日 13:37:42 - 13:37:43
计算机名称: CN-89FF4B9EA4D6
扫描类型: 扫描指定目标
目标: E:\Documents and Settings\Administrator\桌面\EXPL0RER.exe


--------------------------------------------------------------------------------

结果: 发现1个恶意软件
Packed.Win32.PolyCrypt.b (病毒)
E:\Documents and Settings\Administrator\桌面\EXPL0RER.exe 操作: 失败
醉一生爱妍
发表于 2008-2-2 13:49:44 | 显示全部楼层
MOF这回你来真实地址了

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
woai_jolin
发表于 2008-2-2 13:54:17 | 显示全部楼层
2008-2-2 13:51:40        Kernel        File  'G:\v\EXPL0RER.exe' was sent to ESET for analysis.
qigang
发表于 2008-2-2 14:01:34 | 显示全部楼层

3/1报壳

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Packer.RyCrypt           

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.29.50
saga3721
发表于 2008-2-2 14:06:18 | 显示全部楼层
File EXPL0RER.rar received on 02.02.2008 07:00:56 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 18/32 (56.25%)
Loading server information...
Your file is queued in position: ___.
Estimated start time is between ___ and ___ .
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results  
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:  
  

Antivirus Version Last Update Result
AhnLab-V3 2008.2.2.10 2008.02.01 -
AntiVir 7.6.0.61 2008.02.01 BDS/Hupigon.Gen
Authentium 4.93.8 2008.02.01 -
Avast 4.7.1098.0 2008.02.01 Win32:RPoly
AVG 7.5.0.516 2008.02.01 Win32/PolyCrypt
BitDefender 7.2 2008.02.02 -
CAT-QuickHeal 9.00 2008.02.01 (Suspicious) - DNAScan
ClamAV 0.92 2008.02.02 Trojan.Packed-70
DrWeb 4.44.0.09170 2008.02.01 -
eSafe 7.0.15.0 2008.01.28 Suspicious File
eTrust-Vet 31.3.5504 2008.02.01 -
Ewido 4.0 2008.02.01 -
FileAdvisor 1 2008.02.02 -
Fortinet 3.14.0.0 2008.02.02 -
F-Prot 4.4.2.54 2008.02.01 -
F-Secure 6.70.13260.0 2008.02.01 Packed.Win32.PolyCrypt.b
Ikarus T3.1.1.20 2008.02.02 Backdoor.Win32.Hupigon.dkl
Kaspersky 7.0.0.125 2008.02.02 Packed.Win32.PolyCrypt.b
McAfee 5221 2008.02.01 PolyCrypt-Packed
Microsoft 1.3204 2008.02.02 Trojan:Win32/Anomaly.gen!A
NOD32v2 2845 2008.02.02 -
Norman 5.80.02 2008.02.01 -
Panda 9.0.0.4 2008.02.01 Suspicious file
Prevx1 V2 2008.02.02 -
Rising 20.29.22.00 2008.01.30 -
Sophos 4.26.0 2008.02.02 Mal/EncPk-BN
Sunbelt 2.2.907.0 2008.02.02 VIPRE.Suspicious
Symantec 10 2008.02.02 -
TheHacker 6.2.9.205 2008.02.01 W32/Behav-Heuristic-069
VBA32 3.12.6.0 2008.02.02 OScope.Backdoor.XiaoBird.6B65
VirusBuster 4.3.26:9 2008.02.01 Packed/SPack
Webwasher-Gateway 6.6.2 2008.02.01 Trojan.Backdoor.Hupigon.Gen
Additional information
File size: 402662 bytes
MD5: 905794943e9f5df1b67235b0204f0e7e
SHA1: 94ced3854fc4bf4ea45d6a81b62b5865fa369df5
hj5abc
发表于 2008-2-2 14:09:45 | 显示全部楼层
Win32:RPoly 应该是generic signature .
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-25 23:53 , Processed in 0.081383 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表