[病毒样本] 7x

显示全部楼层 · 发表于 2008-12-28 14:06:12

http://xianexs.mail.qq.com/cgi-bin/downloadfilepart/svrid276/virus.rar?svrid=276&fid=34d1f422de6db86b1eefab3eff83b0719fd500752c2b2c95&&txf_fid=&&txf_sid=

(提取码 b6d01068)

[ 本帖最后由 Palkia 于 2008-12-28 15:01 编辑 ]

显示全部楼层 · 发表于 2008-12-28 14:09:23

attachment?

显示全部楼层 · 发表于 2008-12-28 14:13:08

稍等~

显示全部楼层 · 发表于 2008-12-28 15:35:21

4 to kl

显示全部楼层 · 发表于 2008-12-28 16:12:59

Hello,

973F6186 - Trojan.Win32.Agent.bath

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

>
>
> ------------------
> The Russia Kaspersky Lab Board Of the Honor Members
>
> Users ID:syfwxmh
>
>
-----------------
Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.

显示全部楼层 · 发表于 2008-12-28 16:13:11

ESET 1
C:\Documents and Settings\GUNDAM\桌面\virus.rar » RAR » F635163C32B3068508BDFA74CDA5BD2E » NSIS » 109.exe - a variant of Win32/Adware.Cinmus application 还不是报毒

显示全部楼层 · 发表于 2008-12-28 16:16:24

信息 2008-12-28  16:15:13 您此次查毒共查出4个病毒以及危险代码
信息 2008-12-28  16:15:13 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件9个
信息 2008-12-28  16:15:13 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-12-28  16:15:13 D:\Desktop\virus\F635163C32B3068508BDFA74CDA5BD2E Win32.Adware.Cinmus.a.53248 跳过，未处理
病毒 2008-12-28  16:15:12 D:\Desktop\virus\B41D991090CAD1501CFF4FC0973F6186 Win32.TrojDownloader.Unknown.21504 跳过，未处理
病毒 2008-12-28  16:15:12 D:\Desktop\virus\938DAF9114C240C5D173E552D1B81D6D Win32.Hack.ThinlPackerT.a.378833 跳过，未处理
病毒 2008-12-28  16:15:12 D:\Desktop\virus\2DF2F56914604722964066DF1C9523E3 Win32.Hack.ThinlPackerT.a.378833 跳过，未处理

金山毒霸可信认证查询结果如下:

报告生成于: 2008/12/28 16:14

F635163C32B3068508BDFA74CDA5BD2E    --------    病毒

2DF2F56914604722964066DF1C9523E3    --------    未知
938DAF9114C240C5D173E552D1B81D6D    --------    未知
C652ABBAFF3E7E3544ECE6B8F0EEA9AD    --------    未知
D01FDA1C2EEB6382F7708D180B624C46    --------    未知
DEB8DEB29FFFACF366D904F55C3C6447    --------    未知

B41D991090CAD1501CFF4FC0973F6186    --------    分析中

理论文件总数: 7
实际文件总数: 7

其中:

分析中: 1
病毒: 1
未知: 5

识别率为: 28%

显示全部楼层 · 发表于 2008-12-28 16:37:15

End of the scan: 2008年12月28日  16:32
Used time: 00:05 Minute(s)
The scan has been done completely.

   1 Scanning directories
   9 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   4 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   1 Archives were scanned
   0 Warnings
   4 Notes
--------------------------------------------------------------------------------------------------------------
File ID  Filename Size (Byte) Result
25220081  文件x3.rar 162.05 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25220044  C652ABBAFF3E7E3544EC...AD  40.5 KB  UNDER ANALYSIS
25219219  D01FDA1C2EEB6382F770...46  23.5 KB  UNDER ANALYSIS
25220045  DEB8DEB29FFFACF366D9...47  120.5 KB  UNDER ANALYSIS

∞∞∞∞∞∞
to  Avira

显示全部楼层 · 发表于 2008-12-28 16:55:37

Hello,

0B624C46, 5C3C6447, F0EEA9AD

No malicious code were found in these files.

973F6186 - Trojan.Win32.Agent.bath

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

> password:virus
>
> ------------------
> The Russia Kaspersky Lab Board Of the Honor Members
>
> Users ID:syfwxmh
>
>
-----------
Regards, Ostroverkhov Vladimir
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-12-28 17:16:59

C:\Users\ekincheng\Desktop\virus.rar\2DF2F56914604722964066DF1C9523E3 Generic!Artemis (特洛伊)
2008/12/28 17:15:58 未采取操作 ekincheng ODS C:\Users\ekincheng\Desktop\virus.rar\938DAF9114C240C5D173E552D1B81D6D Generic!Artemis (特洛伊)
2008/12/28 17:15:58 未采取操作 ekincheng ODS C:\Users\ekincheng\Desktop\virus.rar\B41D991090CAD1501CFF4FC0973F6186 Generic Dropper (特洛伊)
2008/12/28 17:16:00 未采取操作 ekincheng ODS C:\Users\ekincheng\Desktop\virus.rar\F635163C32B3068508BDFA74CDA5BD2E Generic!Artemis (特洛伊)