费尔扫到的，NOD32居然全过？？！！

显示全部楼层 · 发表于 2008-7-26 20:19:09

本人新装费尔，扫描一下啊，好晕！！居然这么多

但是在NOD32上全过，更加晕！！！

   因为样本太大附件无法上传，提供网盘下载，大家帮忙鉴定下。

   网盘下载：http://soudisk.com/pick.aspx?code=1989274486

   提取码：1989274486

[ 本帖最后由 eric_awa 于 2008-7-26 20:51 编辑 ]

显示全部楼层 · 发表于 2008-7-26 20:20:58

什么盘
系统禁止了使用下载工具下载或不允许外部链接！

显示全部楼层 · 发表于 2008-7-26 20:30:13

可以啦不好意思不熟练

显示全部楼层 · 发表于 2008-7-26 20:35:35

原帖由 eric_awa 于 2008-7-26 20:30 发表
可以啦不好意思不熟练

依旧无法下载
提示无此提取码文件

显示全部楼层 · 发表于 2008-7-26 20:37:03

还是这样。。。

显示全部楼层 · 发表于 2008-7-26 20:40:02

>>>>>>>>>>>>>>

显示全部楼层 · 发表于 2008-7-26 20:43:01

好晕

貌似163网盘不提供外部链接

显示全部楼层 · 发表于 2008-7-26 20:46:06

好晕还不可以？？？？

再试下@@

显示全部楼层 · 发表于 2008-7-26 20:49:03

卡饭提供的国外样本扫描结果：

File ____.rar received on 07.26.2008 14:34:28 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 17/35 (48.58%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 40 and 58 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2008.7.26.0 2008.07.25 -
AntiVir 7.8.1.12 2008.07.25 SPR/KeyLogger.S.2
Authentium 5.1.0.4 2008.07.26 -
Avast 4.8.1195.0 2008.07.25 Win32:Spyware-gen
AVG 8.0.0.130 2008.07.25 Worm/Autoit.AMA
BitDefender 7.2 2008.07.26 -
CAT-QuickHeal 9.50 2008.07.25 Hoax.Freeline.k (Not a Virus)
ClamAV 0.93.1 2008.07.26 Worm.Autorun-584
DrWeb 4.44.0.09170 2008.07.26 -
eSafe 7.0.17.0 2008.07.24 Suspicious File
eTrust-Vet 31.6.5983 2008.07.26 -
Ewido 4.0 2008.07.26 -
F-Prot 4.4.4.56 2008.07.25 -
F-Secure 7.60.13501.0 2008.07.26 Trojan.Win32.DNSChanger.ech
Fortinet 3.14.0.0 2008.07.26 -
GData 2.0.7306.1023 2008.07.26 Win32:Spyware-gen
Ikarus T3.1.1.34.0 2008.07.26 Virus.Win32.AutoRun.ala
Kaspersky 7.0.0.125 2008.07.26 Trojan.Win32.DNSChanger.ech
McAfee 5347 2008.07.25 -
Microsoft 1.3704 2008.07.26 -
NOD32v2 3300 2008.07.25 archive damaged
Norman 5.80.02 2008.07.25 -
Panda 9.0.0.4 2008.07.26 W32/Autorun.QV.worm
PCTools 4.4.2.0 2008.07.25 -
Prevx1 V2 2008.07.26 Suspicious
Rising 20.54.52.00 2008.07.26 -
Sophos 4.31.0 2008.07.26 -
Sunbelt 3.1.1536.1 2008.07.25 Malware.Win32.CodeAnalyzer!cobra (v)
Symantec 10 2008.07.26 -
TheHacker 6.2.96.389 2008.07.25 Aplicacion/Freeline.k
TrendMicro 8.700.0.1004 2008.07.26 PAK_Generic.001
VBA32 3.12.8.1 2008.07.26 -
ViRobot 2008.7.26.1311 2008.07.26 -
VirusBuster 4.5.11.0 2008.07.26 -
Webwasher-Gateway 6.6.2 2008.07.26 Exploit.HTML.Shellcode.gen (suspicious)
Additional information
File size: 8725841 bytes
MD5...: 1628e0ac6a0cc2832bf28b896914a16d
SHA1..: 4432bbfd5ccae2dd30bb459348fc3302be8cf00d
SHA256: f08094158522493ebc79c63465de6855547e260766ba07e3c8b002adb410b629
SHA512: 53a7792376741fd45c8536cb18b8c7210f39d89fcf60eca417bf0e8c17c4eb1b
ac41b0eafd0ed511fe458182a6b380dea5d702150b4902fac44d458b385f1b6e
PEiD..: -
PEInfo: -
Prevx info: http://info.prevx.com/aboutprogr ... 0577EB0A600B57D705D
packers (Kaspersky): UPX, PE_Patch.PECompact, PecBundle, PECompact, UPX, UPX
packers (F-Prot): UPX, PecBundle, PECompact

显示全部楼层 · 发表于 2008-7-26 20:54:48

貌似可以下的

[病毒样本] 费尔扫到的，NOD32居然全过？？！！

本帖子中包含更多资源