2008年11月9日中午收集的12个可疑样本

显示全部楼层 · 发表于 2008-11-9 11:49:49

2008年11月9日中午收集的12个可疑样本
如果您的安全软件无法查杀,
请及时上报. 谢谢
其中驱逐舰发现2个.....其余已上报

点击下载2008年11月9日中午收集的12个可疑样本

[ 本帖最后由 zjsxsycj 于 2008-11-9 11:58 编辑 ]

显示全部楼层 · 发表于 2008-11-9 11:50:23

文件不存在？

[ 本帖最后由 luxiao200888 于 2008-11-9 11:51 编辑 ]

显示全部楼层 · 发表于 2008-11-9 11:56:42

rs09 0

[ 本帖最后由 tvuser2007 于 2008-11-9 12:04 编辑 ]

显示全部楼层 · 发表于 2008-11-9 12:03:48

> 欢迎您使用山寨反流行病毒软件
> 流行病毒特征数: 17588

> 当前最新版本为 20081108-1
> 您现在使用的是最新版本！！！

> 山寨反流行病毒软件4.0隆重发布！更强的查杀能力！全球唯一一款驱动级的流行病毒查杀工具。同时3.1以下版本停止更新服务。

> 正在扫描指定目录病毒 2008年11月9日12时3分30秒

> 发现病毒!! test2.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\12ge_virus\test2.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! test5.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\12ge_virus\test5.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

miss to sz labs

显示全部楼层 · 发表于 2008-11-9 12:18:27

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-08
F-Secure Hydra: 2.08.8110, 2008-11-09

Result: 2 malware found
Trojan-Spy.Win32.Flux.atv (virus)
C:\Documents and Settings\sk\桌面\virusrun\081109\virus.rar\test5.exe
Trojan-Downloader.Win32.Agent.anya (virus)
C:\Documents and Settings\sk\桌面\virusrun\081109\virus.rar\test2.exe

剩下沙盘砍光，清一色 W32/Downloader (virus)

显示全部楼层 · 发表于 2008-11-9 12:18:58

卡巴8.0.0.454 高启发清空（启发了 10 个）

2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test38.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test37.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test36.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test35.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test33.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test34.exe
2008-11-09 12:16:13 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test32.exe
2008-11-09 12:16:12 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test31.exe
2008-11-09 12:16:12 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test3.exe
2008-11-09 12:16:14 已被删除: Heur.Downloader F:\病毒样本\12ge_virus\test39.exe
2008-11-09 12:16:12 已被删除: Trojan-Downloader.Win32.Agent.anya F:\病毒样本\12ge_virus\test2.exe
2008-11-09 12:16:14 已被删除: Trojan-Spy.Win32.Flux.atv F:\病毒样本\12ge_virus\test5.exe

显示全部楼层 · 发表于 2008-11-9 12:20:08

all malware
以下行为相似
A5ABE3436195D7DAA29F28583CE4C79B  9.exe
6C6BF8C7DEBB45DF9012F62125B1054E  8.exe
F9B5FEBF7B44A0FC7CDFFF8251C95FBF  7.exe
65BB5FC38CF81DEAEE70ED2FC6D57560  6.exe
CAA61E4E9622DA90935717760A4A123D  5.exe
875E7BA630E28D08566B2BE0482467C5  4.exe
5CA3521A5379EC195D1FCE69D47D253D  3.exe
F01502E1A7B68A1D6883F6A12D50FD71  2.exe
0EB4F520A60D3DE21548FEADDDC44192  11.exe
FEF2A891D523699444CBA3CE167DD8DF  10.exe
--------------------------
以下行为相似
3096A5BCBFD9114B7508074F16A5592B  1.exe
3096A5BCBFD9114B7508074F16A5592B  7(1).exe

显示全部楼层 · 发表于 2008-11-9 12:22:16

你的样本跟lz的不一样

显示全部楼层 · 发表于 2008-11-9 12:22:25

kaspersky new emu
Kill all

显示全部楼层 · 发表于 2008-11-9 12:26:13

2008-11-9 12:26:30 Real-time file system protection file G:\v\test3.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:30 Real-time file system protection file G:\v\test2.exe a variant of Win32/TrojanDownloader.Delf.OHJ trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:29 Real-time file system protection file G:\v\test39.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:29 Real-time file system protection file G:\v\test38.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:29 Real-time file system protection file G:\v\test37.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:28 Real-time file system protection file G:\v\test36.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:28 Real-time file system protection file G:\v\test35.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:28 Real-time file system protection file G:\v\test34.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:28 Real-time file system protection file G:\v\test33.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:27 Real-time file system protection file G:\v\test32.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:27 Real-time file system protection file G:\v\test31.exe Win32/TrojanDownloader.Agent.OLS trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-11-9 12:26:27 Real-time file system protection file G:\v\test5.exe a variant of Win32/TrojanDownloader.VB.NQL trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

[病毒样本] 2008年11月9日中午收集的12个可疑样本

本帖子中包含更多资源

本帖子中包含更多资源

回复 1楼 zjsxsycj 的帖子

回复 3楼 tvuser2007 的帖子

清空

浏览过的版块