发个高质量的免杀

显示全部楼层 · 发表于 2008-10-12 17:38:52

质量真的很高...

显示全部楼层 · 发表于 2008-10-12 17:47:49

2008/10/12 17:45:40 Deleted: Trojan-GameThief.Win32.Magania.gen F:\kdxywg.rar/kdxywg.exe

显示全部楼层 · 发表于 2008-10-12 18:56:00

呵呵,楼主在过星期几?

显示全部楼层 · 发表于 2008-10-12 19:02:29

To KL

AhnLab-V3	2008.10.10.1	2008.10.10	-
AntiVir	7.8.1.34	2008.10.11	-
Authentium	5.1.0.4	2008.10.11	-
Avast	4.8.1248.0	2008.10.11	-
AVG	8.0.0.161	2008.10.11	Generic10.LEP
BitDefender	7.2	2008.10.12	-
CAT-QuickHeal	9.50	2008.10.11	-
ClamAV	0.93.1	2008.10.12	-
DrWeb	4.44.0.09170	2008.10.12	-
eSafe	7.0.17.0	2008.10.08	-
eTrust-Vet	31.6.6141	2008.10.10	-
Ewido	4.0	2008.10.12	-
F-Prot	4.4.4.56	2008.10.11	-
F-Secure	8.0.14332.0	2008.10.12	W32/Packed_Upack.A.dropper
Fortinet	3.113.0.0	2008.10.12	-
GData	19	2008.10.12	-
Ikarus	T3.1.1.34.0	2008.10.12	Virus.Win32.Agent.ZRP
K7AntiVirus	7.10.491	2008.10.11	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2008.10.12	-
McAfee	5403	2008.10.11	-
Microsoft	1.4005	2008.10.12	PWS:Win32/OnLineGames.NJ
NOD32	3515	2008.10.11	-
Norman	5.80.02	2008.10.10	W32/Packed_Upack.A.dropper
Panda	9.0.0.4	2008.10.12	-
PCTools	4.4.2.0	2008.10.11	-
Prevx1	V2	2008.10.12	-
Rising	20.65.42.00	2008.10.10	-
SecureWeb-Gateway	6.7.6	2008.10.11	-
Sophos	4.34.0	2008.10.12	Mal/Dropper-AE
Sunbelt	3.1.1716.1	2008.10.12	-
Symantec	10	2008.10.12	-
TheHacker	6.3.1.0.108	2008.10.11	Trojan/Dropper.Agent.xjb
TrendMicro	8.700.0.1004	2008.10.10	-
VBA32	3.12.8.6	2008.10.12	-
ViRobot	2008.10.10.1416	2008.10.10	-
VirusBuster	4.5.11.0	2008.10.11	Backdoor.Agent.FAMO

显示全部楼层 · 发表于 2008-10-12 19:43:21

我能说什么？楼主的样本 NOD扫描后未发现威胁

用10楼小a 提取的真正的毒 NOD反而报了我

RAR > kdxywg.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变
RAR > loadwg.exe > AUTOIT > script.au3 - 正常

显示全部楼层 · 发表于 2008-10-12 19:48:59

Begin scan in 'E:\Download\Virus\kdxywg.rar'
E:\Download\Virus\kdxywg.rar
E:\Download\Virus\kdxywg.rar
[0] Archive type: RAR
--> loadwg.exe
[DETECTION] Is the TR/Agent.325257 Trojan
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2008-10-12 19:49:47

McAfee miss

显示全部楼层 · 发表于 2008-10-12 22:41:39

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: kdxywg.rar

显示全部楼层 · 发表于 2008-10-13 12:12:12

Please quote all when answering. Do not forget to inclu ... [/quote]可以搞定了
2008-10-13 12:11:23 http://bbs.kafan.cn/attachment.php?aid=375556&k=c7b35c19ab1525e76b427982f0359afd&t=1223871043//kdxywg.exe ThunderS Module 拒绝: Backdoor.Win32.Hupigon.ekop
2008-10-13 12:11:23 http://bbs.kafan.cn/attachment.php?aid=375556&k=c7b35c19ab1525e76b427982f0359afd&t=1223871043//kdxywg.exe ThunderS Module 已检测到: Backdoor.Win32.Hupigon.ekop

[病毒样本] 发个高质量的免杀

本帖子中包含更多资源

回复 10楼 aarwwefdds 的帖子