[病毒样本] 1ge

显示全部楼层 · 发表于 2008-7-21 16:19:04

25%的杀软(9/36)报告发现病毒
热心人帮忙观察下行为啊

显示全部楼层 · 发表于 2008-7-21 16:23:53

Begin scan in 'C:\Documents and Settings\haha\桌面\virus.exe'
C:\Documents and Settings\haha\桌面\virus.exe
[DETECTION] Is the TR/Crypt.ASPM.Gen Trojan
[NOTE]    A backup was created as '48f647e4.qua'  ( QUARANTINE )
[NOTE]    Attempting to perform action using the ARK lib.
[NOTE]    A backup was created as '4e520fbd.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-7-21 16:26:50

呵呵过了大部分主流杀软
VirSCAN.org Scanned Report :
Scanner results: 25%的杀软(9/36)报告发现病毒
File Name    : virus.rar
File Size    : 616454 byte
File Type    : RAR archive data, v1d, os
MD5          : 9490e1a3f0a6ad241204c71bdf78b71f
SHA1          : 802dca01969c6759b21de63bec618ca7136c56fe
Online report  : http://virscan.org/report/8602f98420778f7c8b7713ea6774b2cf.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.22       2008.07.20       2008-07-20  3.21 -
安博士V3    2008.07.21.00 2008.07.21       2008-07-21  0.92 -
AntiVir       7.8.1.11       7.0.5.142       2008-07-21  2.12 TR/Crypt.ASPM.Gen
Arcavir       1.0.4          200807151947    2008-07-15  1.20 -
AVAST!       3.0.1          080720-0       2008-07-20  0.10 -
AVG          7.5.51.442    270.5.3/1563    2008-07-20  1.47 SHeur.BKOW
BitDefender 7.60825.1382266 7.20118          2008-07-21  3.88 Backdoor.Hupigon.AAAH
CA (VET)    9.0.0.143    31.6.5966       2008-07-18  0.63 -
ClamAV       0.93.3       7765             2008-07-21  0.10 -
Comodo       2.11          2.0.0.592       2008-07-21  0.43 -
CP Secure    1.1.0.715    2008.07.21       2008-07-21  5.88 Troj.Downloader.W32.Delf.fbx
Dr.Web       4.44.0.9170    2008.07.21       2008-07-21  3.15 -
ewido       4.0.0.2       2008.07.21       2008-07-21  2.97 -
F-Prot       4.4.4.56       20080720       2008-07-20  1.07 W32/Hupigon.G.gen!Eldorado (generic, not disinfectable)
F-Secure    5.51.6100    2008.07.21.02    2008-07-21  2.60 -
飞塔          2.81-3.11    9.339          2008-07-21  1.77 -
ViRobot       20080719       2008.07.19       2008-07-19  0.40 -
Ikarus       T3.1.01.34    2008.07.21.71130  2008-07-21  3.19 MalwareScope.Backdoor.Hupigon.17
江民杀毒    11.0.706       2008.07.21       2008-07-21  1.31 -
卡巴斯基    5.5.10       2008.07.21       2008-07-21  0.07 -
金山毒霸    2008.1.14.15 2008.7.21.14    2008-07-21  0.82 -
迈克菲       5.2.00       5342             2008-07-18  2.71 -
Microsoft    1.3704       2008.07.21       2008-07-21  4.90 -
mks_vir       2.01          2008.07.21       2008-07-21  2.47 -
Norman       5.93.01       5.93.00          2008-07-18  5.59 -
熊猫卫士    9.05.01       2008.07.20       2008-07-20  2.00 -
趋势科技    8.700-1004    5.420.03       2008-07-20  0.17 -
Quick Heal    9.50          2008.07.15       2008-07-15  1.74 -
瑞星          20.0          20.54.00.00    2008-07-21  0.95 -
Sophos       2.75.4       4.31             2008-07-21  1.92 Mal/Behav-204
Sunbelt       3.1.1536.1    2156             2008-07-18  0.64 VIPRE.Suspicious
赛门铁克    1.3.0.24       20080720.003    2008-07-20  0.24 -
nProtect    2008-07-18.00 1694476          2008-07-18  3.72 Backdoor/W32.Hupigon.619520.L
The Hacker    6.2.96       v00385          2008-07-19  0.42 -
VBA32       3.12.8.1       20080720.0927    2008-07-20  2.29 -
VirusBuster 4.5.11.10    10.82.12/595718 2008-07-15  0.98 -

显示全部楼层 · 发表于 2008-7-21 16:31:04

显示全部楼层 · 发表于 2008-7-21 16:32:13

费尔侦测到 Trojan.ASPM.Gen.zbqf

显示全部楼层 · 发表于 2008-7-21 16:37:17

小A报:2008-7-21 PM 4:32:48 ZfJing 1800 Sign of "Win32:Agent-OQV [Trj]" has been found in "C:\Documents and Settings\ZfJing\桌面\Desktop.zip\RegSerSetup.exe\[ASPack]\[Embedded#REGSVERDLL]" file.
2008-7-21 PM 4:36:20 ZfJing 1992 Sign of "Win32:Delf-CEA [Trj]" has been found in "C:\Documents and Settings\ZfJing\桌面\viruss[1].part1.rar\virus.exe\[ASProtect]\[NakedPacker]" file.
漏了一个VIRUS.EXE

显示全部楼层 · 发表于 2008-7-21 17:43:07

AVK06 kill

显示全部楼层 · 发表于 2008-7-21 21:17:20

我的红伞怎么没报，比3楼的那个还新一些

显示全部楼层 · 发表于 2008-7-21 21:22:04

McAfee miss

显示全部楼层 · 发表于 2008-7-21 22:24:28

金山 0

[病毒样本] 1ge

本帖子中包含更多资源

本帖子中包含更多资源