155.exe更新2[2.4]

显示全部楼层 · 发表于 2009-2-4 16:28:22

MD5: 2E217391B4EFFCC52395BCB930B43ED6
Borland Delphi v6.0 - v7.0
Notice:0x00009EC0 extra bytes found,starting at offset 0x00006400.

显示全部楼层 · 发表于 2009-2-4 16:31:28

显示全部楼层 · 发表于 2009-2-4 16:34:13

to kaba kill,waiting for reply。。。

显示全部楼层 · 发表于 2009-2-4 16:40:12

VB MISS

显示全部楼层 · 发表于 2009-2-4 16:41:40

TO ESET

显示全部楼层 · 发表于 2009-2-4 18:15:04

AVAST miss

显示全部楼层 · 发表于 2009-2-4 19:28:21

C:\Documents and Settings\Administrator\桌面\155.rar>>155.exe Heuri.Possible/Packed 启发式扫描还未处理

显示全部楼层 · 发表于 2009-2-4 19:29:35

to symantec

显示全部楼层 · 发表于 2009-2-4 19:33:20

Dear tracydk tracydk,

We have analyzed your submission. The following is a report of our
findings for each file you have submitted:

filename: D:\\155.rar
machine: Machine
result: See the developer notes

filename: 155.exe
machine: Machine
result: This file is detected as Trojan.Dropper.

显示全部楼层 · 发表于 2009-2-4 19:37:49

a-squared	4.0.0.93	2009.02.04	Riskware.Win32.DelfInject!IK
AhnLab-V3	5.0.0.2	2009.02.04	-
AntiVir	7.9.0.71	2009.02.04	-
Authentium	5.1.0.4	2009.02.03	-
Avast	4.8.1281.0	2009.02.03	-
AVG	8.0.0.229	2009.02.04	-
BitDefender	7.2	2009.02.04	-
CAT-QuickHeal	10.00	2009.02.04	-
ClamAV	0.94.1	2009.02.04	-
Comodo	963	2009.02.04	-
DrWeb	4.44.0.09170	2009.02.04	-
eSafe	7.0.17.0	2009.02.01	-
eTrust-Vet	31.6.6341	2009.02.04	-
F-Prot	4.4.4.56	2009.02.03	-
F-Secure	8.0.14470.0	2009.02.04	-
Fortinet	3.117.0.0	2009.02.04	-
GData	19	2009.02.04	-
Ikarus	T3.1.1.45.0	2009.02.04	VirTool.Win32.DelfInject
K7AntiVirus	7.10.617	2009.02.03	-
Kaspersky	7.0.0.125	2009.02.04	-
McAfee	5515	2009.02.03	-
McAfee+Artemis	5515	2009.02.03	-
Microsoft	1.4306	2009.02.04	VirTool:Win32/DelfInject.gen!X
NOD32	3825	2009.02.04	-
Norman	6.00.02	2009.02.03	-
nProtect	2009.1.8.0	2009.02.04	-
Panda	9.5.1.2	2009.02.03	-
PCTools	4.4.2.0	2009.02.03	-
Prevx1	V2	2009.02.04	-
Rising	21.15.20.00	2009.02.04	-
SecureWeb-Gateway	6.7.6	2009.02.04	-
Sophos	4.38.0	2009.02.04	-
Sunbelt	3.2.1835.2	2009.01.16	-
Symantec	10	2009.02.04	Trojan.Dropper
TheHacker	6.3.1.5.246	2009.02.04	-
TrendMicro	8.700.0.1004	2009.02.04	-
VBA32	3.12.8.12	2009.02.04	-
ViRobot	2009.2.4.1589	2009.02.04	-
VirusBuster	4.5.11.0	2009.02.03	-

赛门铁克的入库速度真是惊人啊，才刚上报不久

[病毒样本] 155.exe更新2[2.4]

本帖子中包含更多资源

NOD32 miss