查看: 2653|回复: 12
收起左侧

[病毒样本] X10

[复制链接]
电影结束了
发表于 2008-8-2 14:01:51 | 显示全部楼层 |阅读模式

源程序给DZ了。。。
生成物打个包上来。。。~
hj5abc
发表于 2008-8-2 14:08:37 | 显示全部楼层
8.

Starting the file scan:

Begin scan in 'H:\10'
H:\10\edfk.exe
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\edot.exe
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\eqvwamkl.dll
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\fdkowvbp.dll
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\grswptdl.exe
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\nfavxwdbdfm.dll
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\nfavxwdbska.dll
    [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!
H:\10\wnslvxtf.dll
    [DETECTION] Contains recognition pattern of the ADSPY/Agent.PB adware or spyware
    [NOTE]      The file was deleted



周末了..

The file 'd100526[1].exe' has been determined to be 'UNDER ANALYSIS'.
The file 'services.dll' has been determined to be 'UNDER ANALYSIS'.

[ 本帖最后由 hj5abc 于 2008-8-2 14:10 编辑 ]
醉一生爱妍
发表于 2008-8-2 14:11:19 | 显示全部楼层
UGuard 完成了在 C:\Documents and Settings\Administrator\桌面\10.zip 上的扫描。
================
================
扫描文件数: 11
本次扫描没有发现威胁。
实际文件数: 1
扫描时间: 0-00-00 00:00:03:0750
威胁比率: 0%
Palkia
发表于 2008-8-2 14:11:20 | 显示全部楼层
病毒        2008-08-02  14:10:22        C:\Documents and Settings\Administrator\桌面\10.zip\grswptdl.exe        Win32.Troj.Vapsup.86016        跳过,未处理       
kingmuro
头像被屏蔽
发表于 2008-8-2 14:11:35 | 显示全部楼层

诺顿杀

kangxi
发表于 2008-8-2 14:14:08 | 显示全部楼层
过卡8 454 冰岛查出1个

-----------------------------SCAN REPORT-----------------------------
F-PROT for Windows

防病毒扫描引擎版本号: 4.4.4
病毒库: 2008-8-2, 0:51

扫描名称: 11
路径扫描: D:\my iso\|

详细扫描
也可以扫描: 子文件夹, 压缩文件, 数据流

已开始扫描: 2008-8-2, 14:09:07
---------------------------------------------------------------------

[发现可能为病毒:]        <W32/Adware-Vapsup!Maximus (not disinfectable)>        D:\my iso\10.zip->fdkowvbp.dll

---------------------------------------------------------------------
小小爬蔷虎
发表于 2008-8-2 14:22:49 | 显示全部楼层
kav8.0.0.454 无视,不过在下载时花费了一点时间。
BING126
头像被屏蔽
发表于 2008-8-2 20:42:19 | 显示全部楼层
McAfee miss
Palkia
发表于 2008-8-2 20:56:06 | 显示全部楼层

金山不报的9个

Hello,

d100526[1].exe - Trojan-Downloader.Win32.Delf.lip,
edfk.exe - Trojan.Win32.Vapsup.jpn,
edot.exe - Trojan.Win32.Vapsup.jpo,
eqvwamkl.dll - Trojan.Win32.Vapsup.jpi,
fdkowvbp.dll - Trojan.Win32.Vapsup.jpj,
nfavxwdbdfm.dll - Trojan.Win32.Vapsup.jpk,
nfavxwdbska.dll - Trojan.Win32.Vapsup.jpl,
wnslvxtf.dll - Trojan.Win32.Vapsup.jpm

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

services.dll - not-a-virus:AdWare.Win32.Virtumonde.aeug

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
woai_jolin
发表于 2008-8-2 21:00:08 | 显示全部楼层
2008-8-2 21:00:11        Real-time file system protection        file        G:\v\edot.exe        a variant of Win32/Adware.Vapsup.AP application        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-7 00:13 , Processed in 0.141478 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表