2008.10.20样本

显示全部楼层 · 发表于 2008-10-20 16:10:08

2008年10月20日采集
如果您手上的杀毒软件无法查杀,
请及时上报.谢谢.
点此下载
2008.10.20.rar

显示全部楼层 · 发表于 2008-10-20 16:19:35

金山

信息 2008-10-20  16:18:19 您此次查毒共查出0个病毒以及危险代码
信息 2008-10-20  16:18:19 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件1个
信息 2008-10-20  16:18:19 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
信息 2008-10-20  16:18:18 金山毒霸主程序启动查毒过程，查毒方式：命令行查毒

显示全部楼层 · 发表于 2008-10-20 16:30:37

password:
virus

[ 本帖最后由 kato9096 于 2008-10-20 16:32 编辑 ]

显示全部楼层 · 发表于 2008-10-20 16:33:12

已刪除: 特洛伊木馬程式 Trojan.Win32.KillAV.rd 檔案: C:\Documents and Settings\kato9096\桌面\2008.10.20\135359F0.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Mapler.ac 檔案: C:\Documents and Settings\kato9096\桌面\2008.10.20\14F43CDA.exe
已刪除: Riskware not-a-virus:RiskTool.Win32.VB.a 檔案: C:\Documents and Settings\kato9096\桌面\2008.10.20\1596485B.exe//FSG
已刪除: Riskware not-a-virus:RiskTool.Win32.Reboot.g 檔案: C:\Documents and Settings\kato9096\桌面\2008.10.20\1952FFCA.exe

上报2

显示全部楼层 · 发表于 2008-10-20 16:48:14

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-10-20 16:50:59

木马名称:Trojan.Win32.VB.ezo
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2008[1].10.20\1596485B.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-10-20 17:14:31

Begin scan in 'E:\Download\Virus\2008.10.20'
E:\Download\Virus\2008.10.20\135359F0.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
E:\Download\Virus\2008.10.20\14AE315E.exe
[DETECTION] Contains recognition pattern of the ADSPY/Optserve.A adware or spyware
[NOTE]    The file was deleted!
E:\Download\Virus\2008.10.20\14F43CDA.exe
[0] Archive type: RSRC
--> Object
   [DETECTION] Is the TR/PSW.Mapler.AD Trojan
[NOTE]    The file was deleted!
E:\Download\Virus\2008.10.20\1596485B.exe
[DETECTION] Contains recognition pattern of the SPR/Tool.VB.A program
[NOTE]    The file was deleted!
E:\Download\Virus\2008.10.20\1.exe
[DETECTION] Is the TR/Agent.AKEH.30 Trojan
[NOTE]    The file was deleted!
E:\Download\Virus\2008.10.20\1952FFCA.exe
[DETECTION] Contains recognition pattern of the SPR/Tool.Reboot.G program
[NOTE]    The file was deleted!

End of the scan: 2008年10月20日星期一  17:14
Used time: 00:08 Minute(s)

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes

显示全部楼层 · 发表于 2008-10-20 17:23:56

显示全部楼层 · 发表于 2008-10-20 19:35:43

怎么回事？诺顿、卡巴、avast、ess都不报毒，不仅如此，论坛最新的几个样本都一样，是不是搞错了。

显示全部楼层 · 发表于 2008-10-20 19:59:17

压缩包加了密码

[病毒样本] 2008.10.20样本

本帖子中包含更多资源

回复 3楼 kato9096 的帖子

回复 4楼 kato9096 的帖子

本帖子中包含更多资源

回复 3楼 kato9096 的帖子

本帖子中包含更多资源

回复 9楼 yazhiliu 的帖子