番茄每日精选 20080624

显示全部楼层 · 发表于 2008-6-24 10:08:53

样本都是4月份的样本，5，6月的样本因为要做list，就不放出来了。
2008年PCSL-Testing测评项目时间表

显示全部楼层 · 发表于 2008-6-24 10:12:14

10个

显示全部楼层 · 发表于 2008-6-24 10:15:42

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhq 文件: F:\20080624.rar/20080624\XX_576.exe//PE_Patch.UPX//UPX//PE_Patch.MaskPE
已删除: 木马程序 Backdoor.Win32.Bifrose.scm 文件: F:\20080624.rar/20080624\XX_585.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.dex 文件: F:\20080624.rar/20080624\XX_588.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.zev 文件: F:\20080624.rar/20080624\XX_589.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.zfu 文件: F:\20080624.rar/20080624\XX_592.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.yzu 文件: F:\20080624.rar/20080624\XX_593.exE//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.rpd 文件: F:\20080624.rar/20080624\XX_600.exe//PE_Patch//UPack
已删除: 木马程序 Backdoor.Win32.Hupigon.eko 文件: F:\20080624.rar/20080624\XX_609.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.qqg 文件: F:\20080624.rar/20080624\XX_630.exe
已删除: 木马程序 Trojan-Downloader.Win32.Zlob.lnd 文件: F:\20080624.rar/20080624\XX_636.exe//PE_Patch.UPX//UPX

卡巴10

显示全部楼层 · 发表于 2008-6-24 10:25:48

trustport 10个
2008.06.24 02:17:45 {1536} (0110) [1624] Delete Win32/PEMask Delete; D:\VIRUS\20080624.rar:\20080624\XX_576.exe
2008.06.24 02:17:45 {1536} (0110) [1624] Delete Dropper.VB.ALK Delete; D:\VIRUS\20080624.rar:\20080624\XX_585.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete Downloader.Agent.SDO Delete; D:\VIRUS\20080624.rar:\20080624\XX_588.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete PSW.OnlineGames.AJIM Delete; D:\VIRUS\20080624.rar:\20080624\XX_589.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete PSW.OnlineGames.AKEH Delete; D:\VIRUS\20080624.rar:\20080624\XX_592.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete PSW.OnlineGames.ALCY Delete; D:\VIRUS\20080624.rar:\20080624\XX_593.exE
2008.06.24 02:17:46 {1536} (0110) [1624] Delete PSW.OnlineGames.AETP Delete; D:\VIRUS\20080624.rar:\20080624\XX_600.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete Pakes.X Delete; D:\VIRUS\20080624.rar:\20080624\XX_609.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete Win32/PEPatch Delete; D:\VIRUS\20080624.rar:\20080624\XX_630.exe
2008.06.24 02:17:46 {1536} (0110) [1624] Delete Downloader.Zlob Delete; D:\VIRUS\20080624.rar:\20080624\XX_636.exe

显示全部楼层 · 发表于 2008-6-24 10:26:22

IKARUS 10
D:\virus\20080624\XX_576.exe - 特征码 'Backdoor.Win32.HacDef.073.B' 被发现
D:\virus\20080624\XX_578.exe
D:\virus\20080624\XX_585.exe - 特征码 'Trojan-Downloader.Agent.ZCR' 被发现
D:\virus\20080624\XX_588.exe - 特征码 'Trojan-Spy.Win32.Banker.ahy' 被发现
D:\virus\20080624\XX_589.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
D:\virus\20080624\XX_592.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
D:\virus\20080624\XX_593.exE - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
D:\virus\20080624\XX_600.exe - 特征码 'Generic.PWS.Games.1' 被发现
D:\virus\20080624\XX_609.exe - 特征码 'Backdoor.Win32.Hupigon.bmi' 被发现
D:\virus\20080624\XX_630.exe - 特征码 'Trojan.Win32.Veslorn.A' 被发现
D:\virus\20080624\XX_636.exe - 特征码 'Trojan-Downloader.Win32.Zlob.abw' 被发现
11 文件被扫描
(0 压缩档 0 文件)
10 特征码被侦测
0 可疑代码段被发现
耗时: 0:01.610

[ 本帖最后由欠妳緈諨于 2008-6-24 10:32 编辑 ]

显示全部楼层 · 发表于 2008-6-24 10:27:54

avira classic
漏1个

显示全部楼层 · 发表于 2008-6-24 10:31:28

C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_576.exe - Win32/PSW.Delf.VL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_585.exe - 可能是 Win32/Poison 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_588.exe - Win32/Drowor.NAE 病毒
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_589.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_592.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_593.exE - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_600.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_609.exe - 可能是 Win32/Genetik 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\20080624.rar > RAR > 20080624\XX_630.exe - Win32/Agent.NEJ 特洛伊木马的变种
ESS 3.0 667 也漏一个

显示全部楼层 · 发表于 2008-6-24 10:35:22

XX_578.exes谁都没报

显示全部楼层 · 发表于 2008-6-24 10:35:28

ikarus漏的一个

File XX_578.exe received on 04.02.2008 13:08:52 (CET)
Current status: finished

Result: 1/32 (3.12%)
Compact Print results
Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
F-Prot - - -
F-Secure - - Suspicious:W32/Malware!Gemini
FileAdvisor - - -
Fortinet - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -

显示全部楼层 · 发表于 2008-6-24 10:36:10

KIS7只测出9个，怎么会漏

[病毒样本] 番茄每日精选 20080624

本帖子中包含更多资源

mcafee8.7

评分

本帖子中包含更多资源