kv三红感叹

aaad2008

kv威胁功能

[ 本帖最后由 aaad2008 于 2008-6-29 18:44 编辑 ]

ch00962610

这贴好水啊

qianwenxiang

Win32:KdCrypt [Cryp] － asd0.exe
Win32:Trojan-gen {Other} － lowpower.exe\1.exe , lowpower.exe\4.exe , lowpower.exe\5.exe\vav.exe
Win32:FakeAV-M [Trj] － lowpower.exe\5.exe\vav.cpl

aaad2008

原帖由 ch00962610 于 2008-6-29 18:34 发表
这贴好水啊

你不要测试我的样本 下都不准 否则我告你 听懂了没

电影结束了

E:\lowpower.exe>>0.exe                 TrojanAgent.FAL.rfpl                      木马
E:\lowpower.exe>>1.exe                 TrojanAgent.FAK.epwi                      木马
E:\lowpower.exe>>2.exe                 TrojanAgent.FAJ.urix                      木马
E:\lowpower.exe>>3.exe                 TrojanPcHealth.1.owyi                     木马
E:\lowpower.exe>>4.exe                 TrojanAgent.FAF.ecae                      木马
E:\lowpower.exe>>5.exe>>vav.cpl        W32.FraudTool.VistaAntivirus2008.zfkd.dll 病毒
E:\lowpower.exe>>5.exe>>vav.exe        W32.FraudTool.VistaAntivirus2008.jdia     病毒

Palkia

病毒 2000-06-29  18:46:59 C:\Documents and Settings\Administrator\桌面\桌面\lowpower.exe\BindFile\4.exe Win32.Troj.Agent.30720 跳过，未处理

[ 本帖最后由 tvuser2007 于 2008-6-29 18:47 编辑 ]

allinwonderi

[Found security risk]         <W32/Virtumonde.T.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\桌面\asd0.exe

---------------------------------------------------------------------
Scan ended:        2008-6-29, 18:47:39
Duration:        0:00:01

Scan result:

Scanned files:                 8
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

wangjay1980

K

Kitman

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面'
C:\Documents and Settings\Administrator\桌面\桌面\asd0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      A backup was created as '48cb860e.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\lowpower.exe
  [0] Archive type: RAR SFX (self extracting)
  --> 0.exe
      [DETECTION] Is the Trojan horse TR/Agent.FAL
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.FAK
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.FAJ
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/PcHealth.1
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Agent.FAF
  --> 5.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.lac
    --> 5.exe
      [1] Archive type: RAR SFX (self extracting)
      --> vav.exe
          [DETECTION] Contains detection pattern of the Phish-File/Email PHISH/FraudTool.WinAntiVirus.V
      [DETECTION] Contains detection pattern of the dropper DR/Agent.lab
      [NOTE]      A backup was created as '48de860b.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!


End of the scan: 2008年6月29日  20:52
Used time: 00:02 min

The scan has been done completely.

      1 Scanning directories
     21 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     12 Files not concerned
      2 Archives were scanned
      0 Warnings
      2 Notes

Sent to Avira

28654621

D:\download\桌面.part1.rar>>lowpower.exe>>0.exe        TrojanAgent.FAL.rfpl        木马        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>1.exe        TrojanAgent.FAK.epwi        木马        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>2.exe        TrojanAgent.FAJ.urix        木马        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>3.exe        TrojanPcHealth.1.owyi        木马        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>4.exe        TrojanAgent.FAF.ecae        木马        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>5.exe>>vav.cpl        W32.FraudTool.VistaAntivirus2008.zfkd.dll        病毒        还未处理
D:\download\桌面.part1.rar>>lowpower.exe>>5.exe>>vav.exe        W32.FraudTool.VistaAntivirus2008.jdia        病毒        还未处理