卡巴报高危(9楼有大量高危生成)

显示全部楼层 · 发表于 2009-2-14 15:10:38

https://www.virustotal.com/anali ... bebce4e20bd944ae715

卡巴已能查出來(Trojan.Win32.VB.jvg)

db02361652f824c11bcb83373b3bd728 hex_fixedinstall.exe

threatexpert报告:
http://www.threatexpert.com/repo ... 61ef8c824e9923d3586

[ 本帖最后由 sam.to 于 2009-2-14 21:19 编辑 ]

显示全部楼层 · 发表于 2009-2-14 15:13:03

to VB

显示全部楼层 · 发表于 2009-2-14 15:13:21

TO KL

显示全部楼层 · 发表于 2009-2-14 15:19:25

又被抢先了,继续等待~~~~~~~~~~~~~~

显示全部楼层 · 发表于 2009-2-14 15:21:46

To McAfee

显示全部楼层 · 发表于 2009-2-14 15:31:10

现在的病毒真可恶!!

显示全部楼层 · 发表于 2009-2-14 15:33:54

Begin scan in 'D:\Marsu-fix2.5_x32.zip'
D:\Marsu-fix2.5_x32.zip
[NOTE] A backup was created as '4a0871bd.qua' ( QUARANTINE )
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2009-2-14 15:37:28

PIS2009启发kill

显示全部楼层 · 发表于 2009-2-14 15:42:03

生成:
85b437345963450deebc3b9039a1bedc  big5.exe2
cfafc5a36c93cfd45045492d541c9efe  cisvc.exe2
b7bac108e225cb56eb190510e6fb1601  install.e2xe
81f220e337b1696323d8eb7fb321f50d  Mspdb60.dll2
85b437345963450deebc3b9039a1bedc  pps.ex2e
a6060e5c881865daa6f1b406b050bb5a  RCDLL.DL2L
eb4a8f35a70a887fe32f43a3aa7d4e9a  RICHTX32.O2CX
24d987ba9faff97d84459c41256bf3e4  shdocvw.oca
950bd233172ef450a249c7f385cccaf5  Vb6.olb
65b761b3fbc93e5f356b6488c55b0557  Vb6debug.dl2l
673336b41b73232a4ea74d48f1495ef4  Vb6ide.d2ll
242e8e0e0e4be129d925c05049eae377  Vbaexe6.lib
673a6ded4c1c74c26002cfed8114dcd2  ~DF6D99.tmp
请上报卡巴

所有exe都是报高危(100)

~DF6D99.tmp

This file is corrupted.

install.e2xe,
Mspdb60.dll2,
RCDLL.DL2L,
RICHTX32.O2CX,
shdocvw.oca,
Vb6.olb,
Vb6debug.dl2l,
Vb6ide.d2ll,
Vbaexe6.lib

No malicious code were found in these files.

[ 本帖最后由 sam.to 于 2009-2-15 14:05 编辑 ]

显示全部楼层 · 发表于 2009-2-14 15:42:17

[病毒样本] 卡巴报高危(9楼有大量高危生成)

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源