过红伞。。

显示全部楼层 · 发表于 2008-7-29 10:00:35

http://www.fs2you.com/files/6419a5d4-324a-11dd-bc1b-0014221f3995/

AhnLab-V3	2008.7.26.0	2008.07.28	-
AntiVir	7.8.1.12	2008.07.28	-
Authentium	5.1.0.4	2008.07.29	-
Avast	4.8.1195.0	2008.07.28	Win32:Trojan-gen {Other}
AVG	8.0.0.130	2008.07.28	Generic10.BBRR
BitDefender	7.2	2008.07.29	-
CAT-QuickHeal	9.50	2008.07.28	TrojanBanker.Banbra.bgk
ClamAV	0.93.1	2008.07.29	PUA.Packed.Themida
DrWeb	4.44.0.09170	2008.07.28	-
eSafe	7.0.17.0	2008.07.28	-
eTrust-Vet	31.6.5989	2008.07.28	-
Ewido	4.0	2008.07.28	-
F-Prot	4.4.4.56	2008.07.28	-
F-Secure	7.60.13501.0	2008.07.29	Trojan-Banker.Win32.Banbra.bgk
Fortinet	3.14.0.0	2008.07.29	-
GData	2.0.7306.1023	2008.07.29	Trojan-Banker.Win32.Banbra.bgk
Ikarus	T3.1.1.34.0	2008.07.29	Virus.Trojan.Banker.Win32.Banbra.bgk
Kaspersky	7.0.0.125	2008.07.29	Trojan-Banker.Win32.Banbra.bgk
McAfee	5348	2008.07.28	W32/Sdbot.worm
Microsoft	1.3704	2008.07.28	-
NOD32v2	3304	2008.07.28	-
Norman	5.80.02	2008.07.28	W32/SDBot.BRBH
Panda	9.0.0.4	2008.07.28	Generic Worm
PCTools	4.4.2.0	2008.07.28	Packed/Themida
Prevx1	V2	2008.07.29	-
Rising	20.55.02.00	2008.07.28	-
Sophos	4.31.0	2008.07.29	Mal/Generic-A
Sunbelt	3.1.1536.1	2008.07.28	-
Symantec	10	2008.07.29	W32.IRCBot
TheHacker	6.2.96.389	2008.07.25	Trojan/Banbra.bgk
TrendMicro	8.700.0.1004	2008.07.28	WORM_SDBOT.GAV
VBA32	3.12.8.1	2008.07.28	Trojan-Banker.Win32.Banbra.bgk
ViRobot	2008.7.26.1311	2008.07.28	-
VirusBuster	4.5.11.0	2008.07.28	Packed/Themida
Webwasher-Gateway	6.6.2	2008.07.29	VBScript.Vulnerable.gen!High (suspicious)

显示全部楼层 · 发表于 2008-7-29 10:10:46

kv pass

显示全部楼层 · 发表于 2008-7-29 10:21:44

费尔 ASP.FileSystemObject.DeleteFile

显示全部楼层 · 发表于 2008-7-29 11:54:59

报sdbot的估计是报themida..

The file '##################(######).exe' has been determined to be 'UNDER ANALYSIS'.

[ 本帖最后由 hj5abc 于 2008-7-29 11:56 编辑 ]

显示全部楼层 · 发表于 2008-7-29 12:02:01

被微点干掉……

显示全部楼层 · 发表于 2008-7-29 12:08:22

红伞的报壳大法也有不灵的时候哦[:27:]

显示全部楼层 · 发表于 2008-7-29 12:18:42

生成器~。。。。
无所谓
反正生成物抓了~

显示全部楼层 · 发表于 2008-7-29 16:11:20

Virus detected: Generic Worm Antivirus protection 2008-7-29 4:10:39 PM Disinfected Path: C:\DOCUMENTS AND SETTINGS\M6TTL\桌面\神话梦幻木马生成器(更新版)\神话梦幻木马生成器(更新版)\神话梦幻木马生成器(更新版).EXE

显示全部楼层 · 发表于 2008-7-29 16:34:10

2008-7-29 16:33:53 HTTP filter file http://cachefile19.fs2you.com/zh ... f883bca78668289db7/ç¥žè¯æ¢¦å¹»æœ¨é©¬ç”Ÿæˆå™¨(æ›´æ–°ç‰ˆ).rar a variant of Win32/Packed.Themida application connection terminated - quarantined 3A8AD2D60C484EE\Administrator Threat was detected upon access to web by the application: C:\Program Files\Maxthon2\Maxthon.exe.

显示全部楼层 · 发表于 2008-7-29 18:32:22

咖啡还不错

，不是传说的鸡肋。

[病毒样本] 过红伞。。