200个可疑样本

显示全部楼层 · 发表于 2008-11-5 15:01:07

2008年11月5日下午收集的可疑样本200个
如果您的安全软件无法查杀,
请及时上报.
谢谢
点击下载病毒包1
点击下载病毒包2
点击下载病毒包3
点击下载病毒包4

显示全部楼层 · 发表于 2008-11-5 15:02:29

太大没兴趣...

显示全部楼层 · 发表于 2008-11-5 18:09:21

nsis，小红伞解不开，全挂。

显示全部楼层 · 发表于 2008-11-5 18:10:41

卡8检出 0

应该是同一类型的，都是在 C:\Program Files\COMMON FILES\PushWare 下创建 Uninst.exe（是个卸载程序）和 cpush.dll ，启动进程 c:\windows\system32\regsvr32.exe 。。。。。

在控制面板中可以找到这个卸载程序，运行后能卸载这些生成的文件，似乎是个什么插件。好像看不出有什么问题，但不明白搞出200个MD5不同而功能相同的程序是什么目的。。。

[ 本帖最后由浪滔天于 2008-11-5 18:46 编辑 ]

显示全部楼层 · 发表于 2008-11-5 18:50:20

补充：实际上总共201 个，但有两个是相同的，应该是199个。

显示全部楼层 · 发表于 2008-11-5 18:54:02

Begin scan in 'E:\Download\Virus\7551--7600'
E:\Download\Virus\7551--7600\ad7553.exe
[DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.161 adware or spyware
[NOTE]    The file was deleted!
E:\Download\Virus\7551--7600\ad7567.exe
[DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.1 adware or spyware
[NOTE]    The file was deleted!
Begin scan in 'E:\Download\Virus\7400-7450'
E:\Download\Virus\7400-7450\ad7565.exe
[DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.160 adware or spyware
[NOTE]    The file was deleted!
Begin scan in 'E:\Download\Virus\7451--7500'
Begin scan in 'E:\Download\Virus\7501--7550'
E:\Download\Virus\7501--7550\ad7528.exe
[DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.158 adware or spyware
[NOTE]    The file was deleted!
E:\Download\Virus\7501--7550\ad7546.exe
[DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.7 adware or spyware
[NOTE]    The file was deleted!

End of the scan: 2008年11月5日星期三  18:53
Used time: 00:10 Minute(s)

The scan has been done completely.

   4 Scanning directories
201 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   5 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
196 Files not concerned
   0 Archives were scanned
   0 Warnings
   5 Notes

显示全部楼层 · 发表于 2008-11-5 18:55:04

Begin scan in 'E:\Download\Virus\生成物.rar'
E:\Download\Virus\生成物.rar
[0] Archive type: RAR
--> cpush.dll
   [DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.2 adware or spyware
--> cpush.tmp
   [DETECTION] Contains recognition pattern of the ADSPY/Sogou.Gen.2 adware or spyware
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-11-5 18:59:46

搜狗的广告插件？

[病毒样本] 200个可疑样本

本帖子中包含更多资源

回复 4楼浪滔天的帖子

回复 7楼 fzz8848 的帖子

[病毒样本] 200个可疑样本

本帖子中包含更多资源

回复 4楼 浪滔天 的帖子

回复 7楼 fzz8848 的帖子

回复 4楼浪滔天的帖子