来一个特征码全过的

ghj89100062

Hello,


New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
Trojan-Downloader.Win32.Agent.biix

a-squared	4.0.0.32	20090221170551	2009-02-21	-	2.493
AntiVir	7.9.0.87	7.1.2.57	2009-02-21	-	1.851
Authentium	5.1.1	200902202036	2009-02-20	-	1.108
AVAST!	3.0.1	090220-0	2009-02-20	-	0.005
AVG	7.5.52.442	270.11.2/1963	2009-02-20	-	1.896
BitDefender	7.81008.2678042	7.23790	2009-02-21	-	2.487
CA (VET)	9.0.0.143	31.6.6368	2009-02-21	-	5.821
ClamAV	0.94.2	9019	2009-02-21	-	0.010
Comodo	3.8	986	2009-02-20	-	0.443
CP Secure	1.1.0.715	2009.02.21	2009-02-21	-	6.975
Dr.Web	4.44.0.9170	2009.02.21	2009-02-21	-	4.018
F-Prot	4.4.4.56	20090220	2009-02-20	-	1.106
F-Secure	5.51.6100	2009.02.20.05	2009-02-20	-	0.050
GData	19.3277/19.232	20090221	2009-02-21	-	4.409
Ikarus	T3.1.01.45	2009.02.21.72333	2009-02-21	-	3.763
Microsoft	1.4306	2009.02.21	2009-02-21	-	4.691
mks_vir	2.01	2009.02.20	2009-02-20	-	2.662
Norman	6.00.06	6.00.00	2009-02-20	Suspicious_F.gen	8.008
nProtect	20090221.01	3171116	2009-02-21	-	5.284
Quick Heal	10.00	2009.02.20	2009-02-20	-	1.356
Sophos	2.83.3	4.38	2009-02-21	-	2.492
Sunbelt	4819	4819	2009-02-16	-	0.497
The Hacker	6.3.2.4	v00262	2009-02-21	-	0.505
VBA32	3.12.10.0	20090220.1924	2009-02-20	-	1.671
ViRobot	20090220	2009.02.20	2009-02-20	-	0.430
VirusBuster	4.5.11.10	10.101.20/930695	2009-02-21	-	1.148
卡巴斯基	5.5.10	2009.02.21	2009-02-21	-	0.025
安博士V3	2009.02.21.00	2009.02.21	2009-02-21	-	1.437
安天	2.0.18	20090221.2192020	2009-02-21	-	0.121
江民杀毒	11.0.706	2009.02.21	2009-02-21	-	2.114
熊猫卫士	9.05.01	2009.02.20	2009-02-20	-	4.025
瑞星	20.0	21.17.51.00	2009-02-21	-	0.270
赛门铁克	1.3.0.24	20090220.004	2009-02-20	-	0.045
趋势科技	8.700-1004	5.860.11	2009-02-20	-	0.021
迈克菲	5.3.00	5531	2009-02-20	-	3.109
金山毒霸	2009.2.5.15	2009.2.21.15	2009-02-21	-	0.620
飞塔	2.81-3.117	10.68	2009-02-20	-	0.164

http://virscan.org/report/bd188ffb76574e7816086da3d07f2f95.html

[ 本帖最后由 ghj89100062 于 2009-2-21 19:11 编辑 ]

luxiao200888

e ....XE的东西...


TO KL

ghj89100062

不用给了
我第一行就是KL的回复了

luxiao200888

heur lab~

saga3721

确实无色无味——不会也无毒吧

luxiao200888

TO Avira

ghj89100062

原帖由 saga3721 于 2009-2-21 19:12 发表
确实无色无味——不会也无毒吧

你吃一下就知道有没有毒了
我也是网吧抓得没法测试
直接给KL的

ghj89100062

样本数太少了
只有一个不好启发的

luxiao200888

慢慢收集....

ghj89100062

辛苦了，筒子