6x

jimmyleo

[ 本帖最后由 jimmyleo 于 2008-11-18 09:22 编辑 ]

冷冷

H:\Handle\1.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
H:\Handle\2.exe - Signature 'AdWare.Win32.AdMedia.b' found
H:\Handle\6.exe
H:\Handle\file.exe
H:\Handle\getexe.exe
H:\Handle\load.exe

        6 Files scanned
          (1 Archiv with 0 files)
        2 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.828
很久咩更新了
----------------

42DC5904A65039D984413264F959ED93  6.exe  >>这个一直困扰我，这个恶意软件是有卸载的……
D41D8CD98F00B204E9800998ECF8427E  getexe.exe >>不是有效的win32程序，0字节的

[ 本帖最后由 冷冷 于 2008-11-18 09:35 编辑 ]

jimmyleo

哈哈 怀念一同讨论的日子

冷冷

那是，估计那右键的设置适合那些cls
最先我在学汉化

sysfc6

17杀5  nod32

欠妳緈諨

使用 G DATA AntiVirus 进行病毒检测
版本 19.0.8234.790
病毒特征库日期 18.11.2008
开始时间: 18.11.2008 10:38
引擎: 引擎 A - BitDefender (AVA 19.1712), 引擎 B - Avast! (AVB 19.111)
高启发: 开启
文件: 开启
系统区域: 关闭
RootKits 检测: 开启

检测选中目录和文件:
  C:\Documents and Settings\Administrator\桌面\Handle\

项目: 1.exe
        路径: C:\Documents and Settings\Administrator\桌面\Handle
        状态: 发现病毒
        病毒: Trojan.Dropper.SFU (引擎 A), Win32:Trojan-gen {Other} (引擎 B)
项目: 2.exe
        路径: C:\Documents and Settings\Administrator\桌面\Handle
        状态: 发现病毒
        病毒: DeepScan:Generic.Adw.Cinmus.2.E8144529 (引擎 A), Win32:Adware-gen [Adw], Win32:Trojan-gen {Other} (引擎 B)
项目: file.exe
        路径: C:\Documents and Settings\Administrator\桌面\Handle
        状态: 发现病毒
        病毒: Win32:Trojan-gen {Other} (引擎 B)
项目: 6.exe
        路径: C:\Documents and Settings\Administrator\桌面\Handle
        状态: 发现病毒
        病毒: Dropped:Adware.Sogou.Gen (引擎 A), Win32:BHO-GG [Adw], Win32:Trojan-gen {Other} (引擎 B)

检测执行时间: 18.11.2008 10:38
    已检测 6 个文件
    已发现 4 个病毒文件
    已发现 0 个可疑文件

jiahsuan

ONECARE，档案剩3个~这软体只报类型不报数量

[ 本帖最后由 jiahsuan 于 2008-11-18 16:49 编辑 ]

will

getexe.exe   0 bytes    抛弃
2.exe  NSIS>>NSIS    流氓软件  抛弃
---

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\1.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 8855DEB33EF423223AB44D8B81CD9EC8

A-squared ----- Trojan-PWS.Win32.OnLineGames!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Win32/Heur  
AntiVir ----- TR/Crypt.XDR.Gen
BitDefender ----- Trojan.Dropper.SFU
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- a variant of Win32/Delf.NNM trojan
Ikarus ----- Trojan-PWS.Win32.OnLineGames
Jiangmin ----- Packed.PE-Encrypt
Kaspersky ----- Trojan-Downloader.Win32.Delf.pse
Kingsoft -----Nothing
Vba32 ----- Embedded.Trojan-Downloader.Win32.Small.xxh

*** 10/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\6.exe
Type: Win32 Executable MS Visual C++ / Extension: .EXE
MD5 Hash: 42DC5904A65039D984413264F959ED93

A-squared ----- Generic.Win32.Malware.Sogou!IK
Avast ----- Win32:BHO-GG [Adw]
Avg ----- Puper.H  
AntiVir ----- DR/BHO.dxc.65
BitDefender ----- Dropped:Adware.Sogou.Gen
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- a variant of Win32/Adware.Cinmus application
Ikarus ----- Generic.Win32.Malware.Sogou
Jiangmin -----Nothing
Kaspersky ----- not-a-virus:AdWare.Win32.BHO.dxc
Kingsoft -----Nothing
Vba32 ----- AdWare.Win32.BHO.dxc

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\file.exe
Type: Win32 Dynamic Link Library / Extension: .DLL
MD5 Hash: 914B07D377F72CF8153D639370959B5B

A-squared -----Nothing
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Win32/Cryptor  
AntiVir ----- TR/Dropper.Gen
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- a variant of Win32/Kryptik.AY trojan
Ikarus -----Nothing
Jiangmin -----Nothing
Kaspersky ----- Trojan.Win32.Agent.anod
Kingsoft ----- Win32.Troj.Agent.30720
Vba32 -----Nothing

*** 6/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\load.exe
Type: Generic Win/DOS Executable / Extension: .EXE
MD5 Hash: 146537705F52CA4FCBD410C07C8DA68B

A-squared ----- Trojan-Downloader.Win32.Banload!IK
Avast -----Nothing
Avg ----- Win32/Heur  
AntiVir ----- TR/Crypt.ASPM.Gen
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset -----Nothing
Ikarus ----- Trojan-Downloader.Win32.Banload
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft -----Nothing
Vba32 -----Nothing

*** 4/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2008/11/18 二 17:46:37.65
The results might be different from that of the GUI version.

[ 本帖最后由 will 于 2008-11-18 17:47 编辑 ]

浪滔天

卡巴 8.0.0.506  5个

2008-11-18 17:37:08        已被删除        广告软件        not-a-virus:AdWare.Win32.BHO.dxc        中        确定        F:\病毒样本\Handle\6.exe               
2008-11-18 17:37:07        已被删除        广告软件        not-a-virus:AdWare.Win32.AdMedia.ed        中        确定        F:\病毒样本\Handle\2.exe               
2008-11-18 17:37:09        已被删除        木马程序        Trojan-PSW.Win32.LdPinch.abtp        高        确定        F:\病毒样本\Handle\load.exe               
2008-11-18 17:37:08        已被删除        木马程序        Trojan.Win32.Agent.anod        高        确定        F:\病毒样本\Handle\file.exe               
2008-11-18 17:37:07        已被删除        木马程序        Trojan-Downloader.Win32.Delf.pse        高        确定        F:\病毒样本\Handle\1.exe

FS
扫描4个
沙盘1个
Clean 1