7

sam.to

3069f083a66168171e42451955f47305   img.ex2e
6179825d27a6fe97e4dc4e69e422ddfe   360se.exe2
bcb106dfd9423c6e3acc5b7cdd500590   hehe.jp2g
d63d0e5c08fdc82c9c6e140dc5a9156f   a1.cs2s
cd34e19f0c890959927cee80c7277e82   svchost.ex2e
0f7e96274e6c5959a1742a8a2d1287b3   ok.exe2
84e7b1c3d6b6c699c222665ac77fe4f7   ldr.ex3e

TO KL

除了img.ex2e,都被卡巴殺掉

img.ex2e沒有惡意

This file is already detected. Please update your bases.

[ 本帖最后由 sam.to 于 2009-3-2 00:21 编辑 ]

ledled

名称: Packed/FSG
类型: Sequence

描述:


文件:
c:\users\administrator\desktop\007\hehe.jp2g

leonfg

C:\Documents and Settings\GUNDAM\桌面\007.rar » RAR » ok.exe2 - Win32/KillAV.NDD trojan
C:\Documents and Settings\GUNDAM\桌面\007.rar » RAR » a1.cs2s - a variant of Win32/KillAV.NDC trojan
C:\Documents and Settings\GUNDAM\桌面\007.rar » RAR » 360se.exe2 - probably a variant of Win32/Genetik trojan

nosferatu

Begin scan in 'C:\Documents and Settings\Administrator\桌面\007'
C:\Documents and Settings\Administrator\桌面\007\360se.exe2
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\007\a1.cs2s
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\007\hehe.jp2g
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\007\ok.exe2
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\007\svchost.ex2e
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/PSW.Wow.fnw Trojan
    [NOTE]      The file was deleted!
25271266  img.ex2e  169 Byte  UNDER ANALYSIS
25270993  ldr.ex3e  68.5 KB  MALWARE

xxl

kis8.0
2009-2-25 1:31:01        检测到威胁: Trojan-GameThief.Win32.WOW.fnw        Internet Explorer                http://bbs.kafan.cn/attachment.p ... 39//svchost.ex2e//#

kingmuro

过咖啡8.7i

nanhezzb

有个IKB的文件无效，之外的微点全部查杀。这几个样本质量很高啊，下载者蠕虫和后门程序很厉害。

[ 本帖最后由 nanhezzb 于 2009-2-25 08:47 编辑 ]

kingsheet

卡巴拦截

wrq

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 3e&t=1235537516
Information:  Is the TR/Crypt.XDR.Gen Trojan  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.88, VDF 7.1.2.75

sound886

FS扫描继续飘过