1 New Sample

显示全部楼层 · 发表于 2008-7-16 22:21:37

报的少，只有熊猫和红伞报了。大家鉴定一下

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.7.16.0	2008.07.16	-
AntiVir	7.8.0.68	2008.07.16	HEUR/Malware
Authentium	5.1.0.4	2008.07.15	-
Avast	4.8.1195.0	2008.07.15	-
AVG	7.5.0.516	2008.07.16	-
BitDefender	7.2	2008.07.16	-
CAT-QuickHeal	9.50	2008.07.15	-
ClamAV	0.93.1	2008.07.16	-
DrWeb	4.44.0.09170	2008.07.16	-
eSafe	7.0.17.0	2008.07.16	-
eTrust-Vet	31.6.5959	2008.07.16	-
Ewido	4.0	2008.07.16	-
F-Prot	4.4.4.56	2008.07.15	-
F-Secure	7.60.13501.0	2008.07.16	-
Fortinet	3.14.0.0	2008.07.16	-
GData	2.0.7306.1023	2008.07.16	-
Ikarus	T3.1.1.26.0	2008.07.16	-
Kaspersky	7.0.0.125	2008.07.16	-
McAfee	5339	2008.07.15	-
Microsoft	1.3704	2008.07.16	-
NOD32v2	3272	2008.07.16	-
Norman	5.80.02	2008.07.16	-
Panda	9.0.0.4	2008.07.16	Suspicious file
Prevx1	V2	2008.07.16	-
Rising	20.53.22.00	2008.07.16	-
Sophos	4.31.0	2008.07.16	-
Sunbelt	3.1.1536.1	2008.07.15	-
Symantec	10	2008.07.16	-
TheHacker	6.2.96.381	2008.07.16	-
TrendMicro	8.700.0.1004	2008.07.16	-
VBA32	3.12.8.0	2008.07.16	-
VirusBuster	4.5.11.0	2008.07.15	-
Webwasher-Gateway	6.6.2	2008.07.16	Heuristic.Malware

Additional information

File size: 3815 bytes

MD5...: f10f202b23100cedcd2517162610cda6

SHA1..: e0dac5366d67c8a07a328ac64df6db820c47f688

SHA256: 9a589f3e9b919cf8ba7819b3c55a10635a239c22fa49b8b558f16ca727f7f650

SHA512: 26f34aef4f7fd53e1368a9c77de4b71aec2d7d5cdb04fc4adb1a9ecf3c17ae55
69861bfdf4f636f01f7491ae6f505df841e7628fbf7dcad068b1cefabcecb6bb

PEiD..: -

显示全部楼层 · 发表于 2008-7-16 22:23:17

[DETECTION] Contains suspicious code HEUR/Malware
上报先。。。。。。

显示全部楼层 · 发表于 2008-7-16 22:27:33

BD挂~

显示全部楼层 · 发表于 2008-7-16 22:31:16

db 0

显示全部楼层 · 发表于 2008-7-16 23:51:21

357abc 0

显示全部楼层 · 发表于 2008-7-17 00:05:47

UG Heur.Download

入库

显示全部楼层 · 发表于 2008-7-17 00:06:55

已上报到卡巴.

显示全部楼层 · 发表于 2008-7-17 06:10:33

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 01&t=1216246211
Information: Contains suspicious code HEUR/Malware

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.68, VDF 7.0.5.128

显示全部楼层 · 发表于 2008-7-17 07:53:38

Start of the scan: 2008年7月17日  07:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\teamozy.rar'
C:\Documents and Settings\Administrator\桌面\teamozy.rar
  [0] Archive type: RAR
  --> teamozy.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-17 14:06:07

Hello,

teamozy.dll - Trojan-Downloader.Win32.Agent.wjt

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] 1 New Sample

本帖子中包含更多资源

回复 1楼 allinwonderi 的帖子