[病毒样本] 8x

显示全部楼层 · 发表于 2009-2-2 22:35:35

KIS2k9 2个
已上报

显示全部楼层 · 发表于 2009-2-2 22:53:50

Begin scan in 'C:\Documents and Settings\Administrator\桌面\DefaultBox.rar'
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar
[0] Archive type: RAR
--> uq411PF4.exe
   [DETECTION] Is the TR/FraudPack.aoy Trojan
--> jumast.dll
   [DETECTION] Is the TR/Downloader.Gen Trojan
   --> msxml71.dll
      [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!

25248871	a.exe	91.5 KB	UNDER ANALYSIS
25248872	b.exe	80.01 KB	UNDER ANALYSIS
25248688	~tmpa.exe	95.5 KB	MALWARE
25248870	~tmpd.exe	156 KB	UNDER ANALYSIS
25248684	~tmpe.exe	88.5 KB	MALWARE

[ 本帖最后由 nosferatu 于 2009-2-2 22:59 编辑 ]

显示全部楼层 · 发表于 2009-2-2 23:07:24

to rs

显示全部楼层 · 发表于 2009-2-2 23:10:19

运行时红伞还会报一个，微点继续杀，最后只剩一个“tmpe”

显示全部楼层 · 发表于 2009-2-2 23:17:07

DR.WEB只報兩個
DefaultBox.rar\uq411PF4.exe--Probably Trojan.Packed.458;;
DefaultBox.rar\msxml71.dll--Trojan.DownLoader.origin

显示全部楼层 · 发表于 2009-2-2 23:17:37

微点 miss ~tmpe.exe
b.exe联网放行后
程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\DEFAULTBOX\B.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\784SX57M\MAIN[1].EXE
2) C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\CRUCIALSOFT LTD\MS ANTISPYWARE 2009\MSAS2009.EXE
删除木马程序及其衍生物!
处理结果：成功清除!

显示全部楼层 · 发表于 2009-2-2 23:22:05

BitDefender全漏

都上報

显示全部楼层 · 发表于 2009-2-2 23:26:29

名称: Trojan.Renos.Gen.15
类型: Mutant

描述:

文件:
c:\users\administrator\appdata\local\temp\7ze737e.tmp\msxml71.dll
其它全部MISS，上报VB

显示全部楼层 · 发表于 2009-2-2 23:31:52

Begin scan in 'C:\Users\LeiLei\Desktop\DefaultBox.rar'
C:\Users\LeiLei\Desktop\DefaultBox.rar
[0] Archive type: RAR
--> uq411PF4.exe
   [DETECTION] Is the TR/FraudPack.aoy Trojan
--> jumast.dll
   [DETECTION] Is the TR/Downloader.Gen Trojan
   --> msxml71.dll
      [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-3 15:00:34

KV09杀1，其余上报

[病毒样本] 8x

本帖子中包含更多资源

回复 2楼 nosferatu 的帖子