ddos1[1].exe [md5:673e4f3]

显示全部楼层 · 发表于 2008-5-11 02:17:47

第一次看见kb的基因，不过感觉还是特征，不然怎么f-secure也可以侦测到？
还有那么多靠着这个名称侦测的。。

File:	ddos1[1].exe
Status:	INFECTED/MALWARE
MD5:	673e4f342e232783f1da3f7ff48f11f3
Packers detected:	PE_PATCH
Bit9 reports:

Scanner results
Scan taken on 10 May 2008 18:15:18 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Vundo.Gen
ArcaVir	Found Trojan.Monder.Gen.54472.MX
Avast	Found nothing
AVG Antivirus	Found Vundo
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found Troj.W32.Monder.gen
Dr.Web	Found Trojan.Virtumod.based
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan.Win32.Monder.gen
Fortinet	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Trojan.Win32.Monder.gen
NOD32	Found nothing
Norman Virus Control	Found W32/Virtumonde.VFI
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Generic-A
VirusBuster	Found nothing
VBA32	Found Trojan.Win32.Monder.gen

显示全部楼层 · 发表于 2008-5-11 02:38:19

微点还是认识这个

显示全部楼层 · 发表于 2008-5-11 09:49:44

kv 0

显示全部楼层 · 发表于 2008-5-11 10:26:52

金山 0

显示全部楼层 · 发表于 2008-5-11 20:56:08

RS20.43.62未杀！

显示全部楼层 · 发表于 2008-5-11 20:59:07

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\ddos1[1].rar<RAR>:ddos1[1].exe <- Trojan.Monder.Gen.54472.MX : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-11 21:01:22

FP6 miss.

[病毒样本] ddos1[1].exe [md5:673e4f3]

本帖子中包含更多资源

2/0

ArcaVir2008