斩断昨天30个毒网的下载源头（一个下载者，卡巴蜘蛛全不报）

显示全部楼层 · 发表于 2007-1-19 02:26:11

具体行为已经有人分析了，这个下载者狠啊

显示全部楼层 · 发表于 2007-1-19 02:26:29

AntiVir  Found HEUR/Crypted
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found GenPack:Trojan.Downloader.ACP
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found W32/Downloader.gen10
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably a variant of Win32/TrojanDownloader.VB.APY (probable variant)
Norman Virus Control  Found nothing
VirusBuster  Found Trojan.DL.Cryptic.Gen
VBA32  Found Trojan.DownLoader.14143

[:15:]

显示全部楼层 · 发表于 2007-1-19 06:47:53

Start scanning boot sectors:
Boot sector 'C:\'
   [NOTE]    No virus was found!

Starting the file scan:

Begin scan in 'C:\Documents and Settings\ericz\Desktop\downloader.rar'
C:\Documents and Settings\ericz\Desktop\
  downloader.rar
[0] Archive type: RAR
--> downloader.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

End of the scan: 2007年1月19日  06:53
Used time: 00:21 min

The scan has been done completely.

显示全部楼层 · 发表于 2007-1-19 09:16:38

运行后微点报杀，未知间谍

显示全部楼层 · 发表于 2007-1-19 15:49:33

显示全部楼层 · 发表于 2007-1-19 17:05:52

Win32:Crypt-JB－－－－－－－－－－－AVAST报

显示全部楼层 · 发表于 2007-1-20 00:17:23

红伞报了

显示全部楼层 · 发表于 2007-1-20 04:19:15

小红伞和NOD32是启发式报的。。。。

显示全部楼层 · 发表于 2007-1-20 04:19:34

一个下载器

显示全部楼层 · 发表于 2007-1-20 10:07:53

红伞改为已知报

[病毒样本] 斩断昨天30个毒网的下载源头（一个下载者，卡巴蜘蛛全不报）

本帖子中包含更多资源

评分

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源