video.cfg X35 (特別包)

显示全部楼层 · 发表于 2008-12-5 16:28:35

最近这个木马改进了,一个特征码只能查出一个文件,所以这里应该有35个特征码

已上报卡巴

video(10).cfg - Trojan.Win32.FraudPack.hba
video(10).cfg - Trojan.Win32.FraudPack.hbu
video(11).cfg - Trojan.Win32.FraudPack.hbb
video(12).cfg - Trojan.Win32.FraudPack.hbc
video(13).cfg - Trojan.Win32.FraudPack.hbd
video(15).cfg - Trojan.Win32.FraudPack.hbk
video(16).cfg - Trojan.Win32.FraudPack.hbl
video(17).cfg - Trojan.Win32.FraudPack.hbm
video(18).cfg - Trojan.Win32.FraudPack.hbn
video(19).cfg - Trojan.Win32.FraudPack.hbo
video(20).cfg - Trojan.Win32.FraudPack.hbq
video(25).cfg - Trojan.Win32.FraudPack.hbp
video(26).cfg - Trojan.Win32.FraudPack.hbr
video(27).cfg - Trojan.Win32.FraudPack.hbs
video(27).cfg - Trojan.Win32.FraudPack.hcc
video(28).cfg - Trojan.Win32.FraudPack.hcd
video(28).cfg - Trojan.Win32.FraudPack.hbt
video(29).cfg - Trojan.Win32.FraudPack.hce
video(3).cfg - Trojan.Win32.FraudPack.hbv
video(30).cfg - Trojan.Win32.FraudPack.hcf
video(31).cfg - Trojan.Win32.FraudPack.hcg
video(32).cfg - Trojan.Win32.FraudPack.hch
video(4).cfg - Trojan.Win32.FraudPack.hbw
video(4).cfg - Trojan.Win32.FraudPack.hbe
video(5).cfg - Trojan.Win32.FraudPack.hbf
video(5).cfg - Trojan.Win32.FraudPack.hbx
video(5).cfg - Trojan.Win32.FraudPack.hci
video(6).cfg - Trojan.Win32.FraudPack.hby
video(6).cfg - Trojan.Win32.FraudPack.hbg
video(7).cfg - Trojan.Win32.FraudPack.hbh
video(7).cfg - Trojan.Win32.FraudPack.hbz
video(8).cfg - Trojan.Win32.FraudPack.hca
video(8).cfg - Trojan.Win32.FraudPack.hbi
video(9).cfg - Trojan.Win32.FraudPack.hbj
video(9).cfg - Trojan.Win32.FraudPack.hcb

[ 本帖最后由 sam.to 于 2008-12-5 21:05 编辑 ]

显示全部楼层 · 发表于 2008-12-5 16:36:23

木马终于知道上进了？

显示全部楼层 · 发表于 2008-12-5 16:40:42

没什么改进，一个特征码一样可以全部检测到。。。。。。

显示全部楼层 · 发表于 2008-12-5 16:41:27

那可能是針对卡巴

显示全部楼层 · 发表于 2008-12-5 19:00:58

nis 2009 kill all

显示全部楼层 · 发表于 2008-12-5 19:23:48

The scan has been done completely.

   6 Scanning directories
   35 Files were scanned
   35 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   35 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   35 Notes

显示全部楼层 · 发表于 2008-12-5 19:45:12

video(10).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(3).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(4).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(5).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(6).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(7).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(8).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(9).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\2;Trojan.Siggen.1346;Deleted.;
video(25).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\3;Trojan.Fakealert.3515;Deleted.;
video(26).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\3;Trojan.Fakealert.3515;Deleted.;
video(27).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\3;Trojan.Fakealert.3515;Deleted.;
video(28).cfg;C:\Documents and Settings\Owner\桌面\新建文件夹\3;Trojan.Fakealert.3515;Deleted.;

显示全部楼层 · 发表于 2008-12-5 20:05:10

McAfee miss

显示全部楼层 · 发表于 2008-12-5 21:57:17

MalwareBytes' AntiMalware
4个Trojan.Downloader
25 26 27 28

显示全部楼层 · 发表于 2008-12-6 16:33:17

C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>3\video(25).cfg Trojan.Agent.asfr.bvtz 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>3\video(26).cfg Trojan.Agent.asfr.bvtz 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>3\video(27).cfg Trojan.Agent.asfr.bvtz 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>3\video(28).cfg Trojan.Agent.asfr.bvtz 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(27).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(28).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(29).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(30).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(31).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(32).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理
C:\Documents and Settings\小飞侠.net\桌面\dd\virus20081206\v002\015\35_cfg_B.rar>>4\video(5).cfg TrojanDownloader.Zlob.aosl.cufs 木马还未处理

[病毒样本] video.cfg X35 (特別包)

本帖子中包含更多资源

回复 3楼 EQ2 的帖子

费尔说：