查看: 3012|回复: 12
收起左侧

[病毒样本] SEP终于报了一个Downloader

[复制链接]
长空之鹰
发表于 2008-4-13 20:36:12 | 显示全部楼层 |阅读模式

File smserv.rar received on 04.13.2008 14:15:42 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 19/31 (61.3%)

Loading server information...
Your file is queued in position: 1.
Estimated start time is between 38 and 55 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact
Print results


Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position:
) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.  
Email:



AntivirusVersionLast UpdateResult
AhnLab-V32008.4.12.02008.04.11-
AntiVir7.6.0.852008.04.11TR/Dldr.VB.byz
Authentium4.93.82008.04.13-
Avast4.8.1169.02008.04.13Win32:AutoRun-JW
AVG7.5.0.5162008.04.12Downloader.VB.ATH
BitDefender7.22008.04.13-
CAT-QuickHeal9.502008.04.12-
ClamAVNone2008.04.13-
DrWeb4.44.0.091702008.04.12modification of Win32.HLLM.Generic.349
eSafe7.0.15.02008.04.09Win32.VB.byz
eTrust-Vet31.3.56922008.04.11-
Ewido4.02008.04.13Downloader.VB.byz
F-Prot4.4.2.542008.04.13W32/Downldr2.BBAH
F-Secure6.70.13260.02008.04.13Trojan-Downloader.Win32.VB.byz
FileAdvisor12008.04.13-
Fortinet3.14.0.02008.04.13W32/VBWorm.BYZ!tr.dldr
IkarusT3.1.1.262008.04.13Trojan-Downloader.Win32.VB.byz
Kaspersky7.0.0.1252008.04.13Trojan-Downloader.Win32.VB.byz
McAfee52722008.04.11W32/Generic.b
Microsoft1.34082008.04.13TrojanDownloader:Win32/VB
NOD32v230212008.04.12probably unknown NewHeur_PE virus
Norman5.80.022008.04.12-
Panda9.0.0.42008.04.13-
Rising20.39.62.002008.04.13Trojan.DL.Win32.VB.yns
Sophos4.28.02008.04.13Mal/SillyFDC-A
Sunbelt3.0.1041.02008.04.12-
Symantec102008.04.13Downloader
TheHacker6.2.92.2762008.04.12-
VBA323.12.6.42008.04.13Trojan-Downloader.Win32.VB.byz
VirusBuster4.3.26:92008.04.12-
Webwasher-Gateway6.6.22008.04.11Trojan.Dldr.VB.byz
Additional information
File size: 6166 bytes
MD5...: 179ecfd9d2bd03834b7b4105c8647787
SHA1..: f3b83544943689de3ed4a4674ea89bc7ffae5095
SHA256: 7af09d822a55dd2af7ab086e384d700f6d46de5204dc917d6834a8c4ad0c64a2
SHA512: 8643db5f8650b561c79cda8aa2f738aef727e5855b22e2d82027ee3d4de24e3d
3ef20a37b565a9f98c7519cfa63129553e99e533c4fdc398d6d8f93bb6ab5b91
PEiD..: -
PEInfo: -

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
qwer9909
发表于 2008-4-13 20:38:06 | 显示全部楼层
-----------------------------SCAN REPORT-----------------------------
F-PROT for Windows

防病毒扫描引擎版本号: 4.4.2
病毒库: 2008-4-13, 8:21

扫描名称: A
路径扫描: C:\Documents and Settings\Administrator\桌面\smserv.rar

详细扫描
也可以扫描: 内子文件夹, 压缩文件, 数据流

已开始扫描: 2008-4-13, 20:37:52
---------------------------------------------------------------------

[发现自动下载软件]?<W32/Downldr2.BBAH (确切, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\smserv.rar->smserv.exe

---------------------------------------------------------------------
扫描已结束:        2008-4-13, 20:37:52
用时:        0:00:00

扫描结果:

已扫描的文件:                 1
已感染的对象:         1
已清除的对象:         0
已隔离的文件:         0
---------------------------------------------------------------------
qigang
发表于 2008-4-13 20:38:55 | 显示全部楼层

2/1

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.DL.Win32.VB.yns   

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.39.62
nosferatu
头像被屏蔽
发表于 2008-4-13 20:43:05 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\smserv.rar'
C:\Documents and Settings\Administrator\桌面\smserv.rar
  [0] Archive type: RAR
  --> smserv.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.byz
      [INFO]      The file was deleted!
马力
发表于 2008-4-13 20:46:39 | 显示全部楼层
驱逐舰不报
allinwonderi
发表于 2008-4-13 20:56:33 | 显示全部楼层
[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\smserv.rar<RAR>:smserv.exe <- Downloader.Vb.Byz : No action



Scanned objects : 2

Infected objects : 1
挪威的冬天
发表于 2008-4-13 21:54:25 | 显示全部楼层
信息        2008-04-13  21:54:21        您此次查毒清除了1个病毒                       
信息        2008-04-13  21:54:21        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-04-13  21:54:21        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件2个                       
信息        2008-04-13  21:54:21        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-04-13  21:54:21        D:\Desktop\smserv.rar\smserv.exe        Win32.TrojDownloader.VB.28672        清除成功
BING126
头像被屏蔽
发表于 2008-4-13 21:56:17 | 显示全部楼层
McAfee        W32/Generic.b
haol
发表于 2008-4-13 23:22:22 | 显示全部楼层
avast found Win32:AutoRun-JW
xuange
发表于 2008-4-14 00:16:57 | 显示全部楼层
TAV miss
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-3 08:08 , Processed in 0.128137 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表