楼主: 醉一生爱妍
收起左侧

[病毒样本] 【高危】 利用shellcode漏洞的病毒

[复制链接]
will
发表于 2008-10-26 13:11:01 | 显示全部楼层

Multi Command-Line Scanner Report
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\24cd978da62cff8370b83c26e134ff4c.exe   
MD5 Hash: 24CD978DA62CFF8370B83C26E134FF4C   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\3ee354cc8b63b8849b28e6f376f2b263.exe   
MD5 Hash: 3EE354CC8B63B8849B28E6F376F2B263   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\477aac8d472a7bea8b906718a2f50c67.exe   
MD5 Hash: 477AAC8D472A7BEA8B906718A2F50C67   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\6c3e53864541bb13fa7853f7b580b807.exe   
MD5 Hash: 6C3E53864541BB13FA7853F7B580B807   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\86d75ae361637a8f9114bb3a40f710d3.exe   
MD5 Hash: 86D75AE361637A8F9114BB3A40F710D3   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\8d66f28d028a4838d09ce4b91d35b7cb.exe   
MD5 Hash: 8D66F28D028A4838D09CE4B91D35B7CB   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\d65df633dc2700d521ae4dff8c393bff.exe   
MD5 Hash: D65DF633DC2700D521AE4DFF8C393BFF   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- SHeur.CQJN     
Antivir ----- TR/Crypt.XPACK.Gen    
BitDefender ----- Dropped:Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.origin    
NOD32 ----- Win32/Spy.Gimmiv.B trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\dc3fdfde66fffb6cfbec946a237787d8.exe   
MD5 Hash: DC3FDFDE66FFFB6CFBEC946A237787D8   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\ee70f981514803e1fb4e6b65f492a56d.exe   
MD5 Hash: EE70F981514803E1FB4E6B65F492A56D   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\f173007fbd8e2190af3be7837acd70a4.exe   
MD5 Hash: F173007FBD8E2190AF3BE7837ACD70A4   
Type: Win32 Executable MS Visual C++ / Extension: .EXE   

A-squared ----- Worm.Win32.Gimmiv.A!IK    
Avast ----- Win32:Agent-ACJW [Trj]    
Avg ----- BackDoor.Generic10.TEZ     
Antivir ----- TR/Dldr.Agent.alce    
BitDefender ----- Win32.Worm.Gimmiv.A    
ClamWin ----- Nothing   
Dr.Web ----- Win32.HLLW.Jimmy.1    
NOD32 ----- Win32/Spy.Gimmiv.A trojan    
Ikarus ----- Worm.Win32.Gimmiv.A    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Spy.Win32.Gimmiv.a    
Kingsoft ----- Win32.Troj.Unknown.z.397312    
Vba32 ----- Nothing   

*** 10/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   

Task done @ 2008/10/26 日 13:10:29.40   
qigang
发表于 2008-10-26 13:25:16 | 显示全部楼层

较早点的病毒样本!

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.Spy.Win32.Undef.z

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.67.52
hzyw
头像被屏蔽
发表于 2008-10-26 13:29:47 | 显示全部楼层
杀光光

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
sanhu35
发表于 2008-10-26 13:33:17 | 显示全部楼层
见光死,补丁也打了 没搞头
纷飞
头像被屏蔽
发表于 2008-10-26 14:17:25 | 显示全部楼层
NAV2009貌似不让解压
taoyuan237
发表于 2008-10-26 14:28:30 | 显示全部楼层
RAV2009
全杀
Redevil
发表于 2008-10-26 14:40:42 | 显示全部楼层
这个标题有点反了吧
foin
发表于 2008-10-26 14:43:14 | 显示全部楼层
下载看看去 谢谢
Elcondorposa
发表于 2008-10-26 16:15:04 | 显示全部楼层
这些就是攻击程序
本拉稀
头像被屏蔽
发表于 2008-10-26 16:42:28 | 显示全部楼层
原帖由 syfwxmh 于 2008-10-26 12:58 发表
kaspersky kill all


kaspersky kills all
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-18 10:59 , Processed in 0.094149 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表