KIS高启发不报

显示全部楼层 · 发表于 2008-2-24 09:48:22

病毒行为见沙盘：http://research.sunbelt-software.com/ViewMalware.aspx?id=3212852

显示全部楼层 · 发表于 2008-2-24 09:51:33

A-Squared  Found nothing
AntiVir  Found TR/Delphi.Downloader.Gen
ArcaVir  Found Heur.W32
Avast  Found nothing
AVG Antivirus  Found Downloader.Delf
BitDefender  Found GenPack:Generic.Malware.dld!.51B0AAD0 (probable variant)
ClamAV  Found nothing
CPsecure  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found Possibly a new variant of W32/NewMalware-LSU-based!Maximus
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Ikarus  Found Trojan-Downloader.Win32.Delf.qz
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably a variant of Win32/TrojanDownloader.Dadobra.FX (probable variant)
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/DelpDldr-C
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2008-2-24 09:56:48

这是啥沙盘？？

[ 本帖最后由 fishx 于 2008-2-24 09:58 编辑 ]

显示全部楼层 · 发表于 2008-2-24 10:07:08

Begin scan in 'D:\BOOK\j.rar'
D:\BOOK\j.rar
  [0] Archive type: RAR
  --> j.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-24 10:12:40

在线沙盘

显示全部楼层 · 发表于 2008-2-24 10:17:36

NOD32:
d:\Profiles\桌面\j.exe - 可能是 Win32/TrojanDownloader.Dadobra.FX 特洛伊木马的变种

AntiVir:
Begin scan in 'd:\Profiles\桌面\j.exe'
d:\Profiles\桌面\j.exe
[DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
[INFO] The file was moved to '4825d3ca.qua'!

显示全部楼层 · 发表于 2008-2-24 10:56:41

nod报括号内的……

显示全部楼层 · 发表于 2008-2-24 11:43:44

扔给卡巴看看~

显示全部楼层 · 发表于 2008-2-24 11:54:05

卡巴KIS7.0.0.125测试；未检测到威胁！
病毒库：2008/2/24 6:43:33

显示全部楼层 · 发表于 2008-2-24 11:56:28

微点也MISS???

[病毒样本] KIS高启发不报

本帖子中包含更多资源

回复 3楼 fishx 的帖子

浏览过的版块