3MB多的病毒+流氓+网马的样本

起点

原帖由 redalert0239 于 2007-1-18 17:30 发表
请问是怎么找到这些毒的  高手

不是说了上毒网弄的吗?

vmzy

小红伞
新建文件夹.rar
  [0] Archive type: RAR
  --> exe\0013.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> exe\0602328.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> exe\2000.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> exe\2002.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> exe\2103.exe
      [DETECTION] Is the Trojan horse TR/Fakealert.AS.1
  --> exe\bd1.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.1
  --> exe\bind_50077.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Cdnup.A.1
  --> exe\dodolook004.exe
      [DETECTION] Contains signature of the dropper DR/Agent.act.1
  --> exe\huawei.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.144 Backdoor server programs
  --> exe\loadadv579.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.dea
  --> exe\mms_831.exe
      [DETECTION] Is the Trojan horse TR/Drop.Bora.X.19.C
  --> exe\Reg.exe
      [DETECTION] Is the Trojan horse TR/Adload.H
  --> exe\sna.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> exe\update.exe
      [DETECTION] Is the Trojan horse TR/Drop.Bora.X.19.C
  --> exe\update0.exe
      [DETECTION] Is the Trojan horse TR/Drop.Bora.X.19.C
  --> exe\update17.exe
      [DETECTION] Contains signature of the dropper DR/Fakealert.AS
  --> exe\update4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.KI.4
  --> exe\zgame4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.QU.10
  --> 800uc.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N
  --> 81308.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N
  --> 15641651.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N
  --> community.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N
  --> fpjyw1.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N
  --> zt920.asp
      [DETECTION] Contains signature of the Java script virus JS/Dldr.IstBar.N

dikex

原帖由 redalert0239 于 2007-1-18 17:30 发表
请问是怎么找到这些毒的  高手

看看顶楼的连接，用虚拟机+嗅探器找到的

redalert0239

誤解我的意思

redalert0239

原帖由 dikex 于 2007-1-18 17:36 发表


看看顶楼的连接，用虚拟机+嗅探器找到的

感謝

leie

谢谢老大，辛苦了

sdbsky

刺猬同志在这里啊

dfy0002

呵呵,怎么这么多人用微点啊?

oscicar

辛苦你了。。老兄