-{老毒新发}- 65个过毒霸扫描…

显示全部楼层 · 发表于 2008-12-26 11:50:00

在帖子最先，要感谢挪威的配合——每次发布样本后都是挪威上报给毒霸的。
昨晚将网马更新贴的样本汇总，卡巴、红伞、NOD32、江民等杀软基本上全砍，很不巧的发现毒霸有六十余样本。
截图留念：

65个样本基本上都取自之前我发过的网马更新贴，并且距离这个帖子最近的一次更新贴是在9天前(17号)。
也就是说，所有样本毒霸都收到了，也上传到了传说中的水银平台（再次感谢挪威的冬天），但是毒霸未能查杀所有样本。
今天再次将样本上传，查漏补缺。希望国产“云安全”第一无敌的毒霸能用病毒处理能力提高100倍的水银系统尽快分析入库，将病毒消灭。

-----------------------------------------------
UPDATE:

Dec 26th,2008 16:29  毒霸病毒库版本：2008.12.26.14  Kill=0
Dec 26th,2008 20:35  毒霸病毒库版本：2008.12.26.17  Kill=0
Dec 26th,2008 21:39  毒霸病毒库版本：2008.12.26.20  Kill=0
Dec 27th,2008 17:39  毒霸病毒库版本：2008.12.27.15  Kill=0
Dec 27th,2008 22:26  毒霸病毒库版本：2008.12.27.20  Kill=0
Dec 28th,2008 15:59  毒霸病毒库版本：2008.12.28.15  Kill=0
Dec 28th,2008 22:24  毒霸病毒库版本：2008.12.28.20  Kill=0
Dec 29th,2008 12:21  毒霸病毒库版本：2008.12.29.11  Kill=0
Dec 29th,2008 14:37  毒霸病毒库版本：2008.12.29.14  Kill=1
Dec 29th,2008 17:58  毒霸病毒库版本：2008.12.29.17  Kill=1
Dec 30th,2008 12:35  毒霸病毒库版本：2008.12.30.10  Kill=1
Dec 30th,2008 17:23  毒霸病毒库版本：2008.12.30.17  Kill=1
Dec 31th,2008 10:26  毒霸病毒库版本：2008.12.31.10  Kill=1

-----------------------------------------------

X.O.X.O.

[ 本帖最后由 will 于 2008-12-31 12:33 编辑 ]

显示全部楼层 · 发表于 2008-12-26 12:14:42

多努力

1.23w扫描后剩余4kb

[ 本帖最后由 yangpoquan 于 2008-12-26 12:19 编辑 ]

显示全部楼层 · 发表于 2008-12-26 13:31:51

瑞星全杀

显示全部楼层 · 发表于 2008-12-26 13:36:43

C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/01034e0819d51483f72ffe0f1901bfe9.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/05533cf755fb48414d865e3eb0505540.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/05c334ee2c03d0057e0c769b4aaf9f1b.exe - 可能是 Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/0723b87eb275dae5721e13f1590db6cd.exe - 可能是 Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/0cf3e5e0102b875a03bbc8492defc43c.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/0d33e7e6ec99e65436470e8cd4c57335.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/1281abcaa2ac8ab99e21f922e7076f76.exe - Win32/PSW.Delf.NNS 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/13d6c06a05c5658ff30594aa65c0bda8.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/15459ab46d5a73b302b26fba3e814190.exe - 可能是 Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/1f2a1cd6b877ac15101e851f69bf40f7.exe - Win32/Rootkit.Agent.NGW 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/234a64dc46ce48964ad1e758f7735a91.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/290847250574f8220c07e83060286c35.exe - Win32/PSW.OnLineGames.NSR 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/348d7032d4c1cec76d02953d0d5490be.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/38de5282f148c31b60baf0ffa465d8ae.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/3db526da8abe1483239d675ccde824b5.exe - Win32/PSW.Agent.NIA 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/3fa9ecf3da808dc9889aef7f2234583b.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/41b3cb76bb0324664b2a313e2ff0fb86.exe - Win32/PSW.Agent.NIA 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/4203d00358370226e06985ed075bbae7.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/44b2cee339242a63987945ccc4cc05af.exe - Win32/Sirung 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/5983beecd069016032c10c3cb97a85bd.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/59bc33bf768aac006748990d2c1391b2.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/61e9e91fd4612c3e01882e3a88610fbf.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/65623093502c034e58612245bc8a16d8.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/68f7f9b8dcd28c4f16b3b07b97fb632d.exe - Win32/PSW.Delf.NNQ 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/6cb94aaeec3d157492ab5b19b747dff9.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/700c90938deb5f1948e8a73c9356f95c.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/70e8df6dfe5b1e15a9ea2990ab802903.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/78e75b65ad6590b6d55362a0fe1ed577.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/82036b4f46874fcb8ffc3b46c6e0a9e4.exe - Win32/Agent.ONC 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/859a16dbf292f2b41d468b3480b39f80.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/8b135bf1b21eb4e87d07297c50d68a99.exe - Win32/PSW.OnLineGames.NST 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/8fdfd1cd3a03e3073c3e886a72698ab5.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/9231bb535da5ffbcef322e7b2f02b570.exe - Win32/TrojanDownloader.Agent.OJO 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/944e1963d611ff6ab481aed270076251.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/9680030bd03d17653c63b4731ee91111.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/9a9a1be5e6691326329ae7c335a90f9e.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/9e2f3b265358ff38e3bb5ac5c1dc18e9.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/a4211923790dd3dddfee4d3611ca3f9d.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/b0a8317682877da296cc062dde77fb1b.exe - 可能是 Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/b1aa0ba4b44251af0f7895fd8c533afb.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/b7db6eee8435c3cf72330ed5c0e8ed0b.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/b8652b6e71cfe08a9df82cdd09063898.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/b9a0a80f773285a8349ec04b7967c69a.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/bc111dcebd7172fba6e9e696a18a6267.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/bf8122c34420da6aaf63d7d3de50ac7a.exe - Win32/TrojanDownloader.Delf.OJD 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c1096dd91e26c1c9fd157ccfb6318cd2.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c2782a41c039ced48d123dbabe32adcd.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c3741575b8dffe6b64dcd2cf3c083180.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c513f8c2082305ca1be2daf903ab04a5.exe - Win32/PSW.Legendmir.NGY 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c876fa8d6d37169d5a33a4ad7b19b7bd.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/c99340524010e444e1d57b293829a08b.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/cda2465b302dd4c6a7c78615bd58c1d7.exe - Win32/Ceckno 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/cdc02b38e9d2d751669ab5567dfc417c.exe - Win32/PSW.OnLineGames.OGH 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ce402c3c9d79dc27dfe7a197ad3a27c5.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ce961096b1bd0f5734b58c974da8cd79.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/d1d019a4ed2e5aaf98bb3bb044abae92.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/d380d1cab040710c36e98ce25e7e7329.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/d674836862b4ee1ba757e2660be25b23.exe > NSIS > cpush.dll - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/d674836862b4ee1ba757e2660be25b23.exe > NSIS > Uninst.exe - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/e352c5cae41629a439065ca659730c59.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ea04b98581d030083887ace75855bcbc.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ec86d7298437fb56ed48472b42a8d33c.exe - 可能是 Win32/AutoRun.WC 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ecca1c8f2910cb856b502fe58ea90728.exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/f10939da89988bdc64920758879644c7.exe - Win32/PSW.Legendmir.NGY 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/f851f8557d30b532a1494016a3a6faa5.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\ForKingsoft.zip > ZIP > ForKingsoft/ff6af4ddd6bbefd6bbe66359cd766c21.exe - 可能是 Win32/AutoRun.WC 蠕虫的变种

显示全部楼层 · 发表于 2008-12-26 13:40:52

呵呵，很明显不是给nis 2009 准备的

，全秒

显示全部楼层 · 发表于 2008-12-26 13:43:11

BitDefender ANtiVIrus 2009
漏 1 個，上報

显示全部楼层 · 发表于 2008-12-26 14:00:08

貌似不齐全

显示全部楼层 · 发表于 2008-12-26 14:03:48

KAV misses 5

显示全部楼层 · 发表于 2008-12-26 16:33:58

Dec 26th,2008 16:29 毒霸仍然无视 Kill=0

X.O.X.O.

[ 本帖最后由 will 于 2008-12-26 16:37 编辑 ]

显示全部楼层 · 发表于 2008-12-26 16:35:01

Please update your KAV to current version.

[病毒样本] -{老毒新发}- 65个过毒霸扫描…

本帖子中包含更多资源

嗯！国产发展

本帖子中包含更多资源

本帖子中包含更多资源

回复 8楼 virax 的帖子