最新msn病毒样板

显示全部楼层 · 发表于 2008-6-30 17:39:29

如题, 我还没上报, 就给兄弟们传来了.

显示全部楼层 · 发表于 2008-6-30 17:40:15

C:\Users\Administrator\Desktop\Photo5.zip - Win32/AutoRun.RB worm

显示全部楼层 · 发表于 2008-6-30 17:42:33

还只有Prevx1和nod报. 刚刚去多引擎那里测试了下.

显示全部楼层 · 发表于 2008-6-30 17:44:22

去virscan.org测试了下, 到现在还没有报.
VirSCAN.org Scanned Report :
Scanned time : 2008/06/30 17:40:27 (CST)
Scanner results: 全部的杀毒软件报告没有发现病毒!
File Name    : Photo5.zip
File Size    : 42652 byte
File Type    : Zip archive data, at least v1.0 to extract
MD5          : 1cbd6669b52cab7eeffdf4c3e22fecbb
SHA1          : c7e9594517a81e11ad5107c2e1aa120c79f0dca7
Online report  : http://virscan.org/report/c1a148c2100a457f4a0bc0dc63ade915.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.18       2008.06.29       2008-06-29  2.46 -
安博士V3    2008.06.30.01 2008.06.30       2008-06-30  1.47 -
AntiVir       7.8.0.59       7.0.5.22       2008-06-30  8.49 -
Arcavir       1.0.4          200806291219    2008-06-29  5.32 -
AVAST!       1.0.8          080628-0       2008-06-28  6.56 -
AVG          7.5.51.442    270.4.3/1525    2008-06-29  7.79 -
BitDefender 7.60825.1296846 7.19787          2008-06-30  12.42  -
CA (VET)    9.0.0.143    31.6.5914       2008-06-30  1.33 -
ClamAV       0.93          7554             2008-06-25  0.00 -
Comodo       2.11          2.0.0.571       2008-06-30  0.98 -
CP Secure    1.1.0.715    2008.06.30       2008-06-30  15.34  -
Dr.Web       4.44.0.9170    2008.06.30       2008-06-30  9.91 -
ewido       4.0.0.2       2008.06.27       2008-06-27  2.50 -
F-Prot       4.4.1.52       20080629       2008-06-29  2.99 -
F-Secure    5.51.6100    2008.06.30.01    2008-06-30  0.09 -
飞塔          2.81-3.11    0.0             1970-01-01  1.10 -
ViRobot       20080627       2008.06.27       2008-06-27  0.90 -
Ikarus       T3.1.01.26    2008.06.30.71005  2008-06-30  4.86 -
江民杀毒    11.0.706       2008.06.30       2008-06-30  1.22 -
卡巴斯基    5.5.10       2008.06.30       2008-06-30  0.07 -
金山毒霸    2008.1.14.15 2008.6.30.17    2008-06-30  0.95 -
迈克菲       5.2.00       5327             2008-06-27  4.21 -
Microsoft    1.3604       2008.06.25       2008-06-25  5.31 -
mks_vir       2.01          2008.06.29       2008-06-29  3.91 -
Norman       5.93.01       5.93.00          2008-06-27  10.18  -
熊猫卫士    9.04.03       2008.06.29       2008-06-29  1.62 -
趋势科技    8.700-1004    5.364.03       2008-06-24  0.04 -
Quick Heal    9.50          2008.06.28       2008-06-28  1.63 -
瑞星          20.0          20.51.01.00    2008-06-30  0.87 -
Sophos       2.74.1       4.30             2008-06-30  4.00 -
Sunbelt       3.0.1176.1    2106             2008-06-25  0.57 -
赛门铁克    1.3.0.24       20080629.002    2008-06-29  0.21 -
nProtect    2008-06-30.00 1589944          2008-06-30  3.08 -
The Hacker    6.2.96       v00364          2008-06-28  0.53 -
VBA32       3.12.6.8       20080630.0132    2008-06-30  1.83 -
VirusBuster 4.5.11.10    10.79.1/594378 2008-06-19  1.08 -

显示全部楼层 · 发表于 2008-6-30 17:44:30

卡巴没报

显示全部楼层 · 发表于 2008-6-30 18:05:05

Filename	Result
photo005.JPEG-www...ce.com	UNDER ANALYSIS

显示全部楼层 · 发表于 2008-6-30 19:32:50

hoho

Hello.
New malicious software was found in the attached files.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: Photo5.zip

[ 本帖最后由 wangjay1980 于 2008-6-30 23:37 编辑 ]

显示全部楼层 · 发表于 2008-6-30 19:38:12

2008-6-30 19:38:24 Real-time file system protection file C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\JYYMJOKY\Photo5[1].zip Win32/AutoRun.RB worm cleaned by deleting (after the next restart) - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\Internet Explorer\iexplore.exe.

显示全部楼层 · 发表于 2008-6-30 19:38:47

McAfee miss

显示全部楼层 · 发表于 2008-6-30 20:27:01

TO lab

[病毒样本] 最新msn病毒样板

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4