收集的样本一个

molicn

Performs File Modification and Destruction: The executable modifies and destructs files which are not temporary.
分析
http://anubis.iseclab.org/?action=result&task_id=1a28a61a37de2e77479735003050dbb39&format=html#chapter1

[ 本帖最后由 molicn 于 2009-2-22 23:19 编辑 ]

小飞猪

不明白

雨宫优子

估计楼主是把DZ样本泄露出来了...


嘿嘿，只是开个玩笑color]


不过这个样本到底有多危险呢？如果不是泄露，可以加上权限再放出^_^..

ledled

Thank you for your submission. Analysis of the file(s) in your submission (30393794) is now complete and this is the final email that you will receive regarding this submission.

The Microsoft Malware Protection Center (MMPC) has investigated the following file(s) which we received on 2/22/2009 4:42:09 PM Pacific Time.
If you were to scan the files you submitted using Microsoft's Forefront Client Security product, you would see relevant detection information similar to what is displayed below.
The detection results for the file(s) in your submission are as follows:


  Submitted Files
  =============================================
  Setup.exe [TrojanDropper:Win32/Squirdots.A]
  +---temp_0.tmp [Trojan:Win32/Squirdots.A]
       +---10 [Trojan:Win32/Squirdots.A]
       +---fc041ee8c6871dca96608a47d1df41c4 [Trojan:Win32/Squirdots.A]
       +---3 [Trojan:BAT/Squirdots.A]
       +---autorun.inf [Trojan:Win32/Squirdots!inf]

The following links contain more information regarding the detections listed above:
http://go.microsoft.com/fwlink/? ... r:Win32/Squirdots.A
http://go.microsoft.com/fwlink/? ... n:Win32/Squirdots.A
http://go.microsoft.com/fwlink/? ... jan:BAT/Squirdots.A
http://go.microsoft.com/fwlink/? ... Win32/Squirdots!inf




Your submission was scanned using antimalware definition version 1.51.937.0.
The most current released antimalware definition update is always available for download at the following location:
http://go.microsoft.com/fwlink/?LinkID=110446

If you have questions relating to this submission please contact mailto:mmpcres@microsoft.com and reference your submission ID.

Thank you,
Microsoft Malware Protection Center

Note: if you feel you have received this e-mail in error, please send mail to:
mailto:mpcabuse@microsoft.com.
微软的效率不错, 赞一个