真假僵尸？红伞并入TR/Crypt.CFI.Gen，卡巴回复no malicious

显示全部楼层 · 发表于 2009-3-4 18:15:03

File ID 燜ilename Size (Byte) Result
25274738  IM.rar 172.26 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
25274739  IM########.exe  329.75 KB  MALWARE

Please find a detailed report concerning each individual sample below:

燜ilename Result
IM########.exe  MALWARE

The file 'IM########.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PePatch.IZ.17. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.01.140. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: TR/Crypt.CFI.Gen.

显示全部楼层 · 发表于 2009-3-4 18:19:06

DR.WEB
IM网络僵尸.exe - infected with Trojan.Siggen.1955

显示全部楼层 · 发表于 2009-3-4 21:20:23

連趨勢都報毒了

Dear VIRUS_DOCTOR@SUPPORT.TRENDMICRO.COM;jsps4112@yahoo.com.tw,

This is a system generated email update.

We are glad to inform you that the detection for BKDR_PACKED.CMG is now available for
downloading using CPR 5.880.03.

To download the latest Control Pattern Release, please use the following link:
http://www.trendmicro.com/download/pattern-cpr-disclaimer.asp

Please expect further updates of this case.

Regards,
AV Case Tracking System
Antivirus Group
TrendLabs HQ, Trend Micro Incorporated
Web: http://www.trendmicro.com

KABA堅持不報毒

Hello,
IM.exe
No malicious code was found in this file.

Regards, Vladislav Pintiysky
Virus Analyst
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由黑衣~魂于 2009-3-4 21:59 编辑 ]

显示全部楼层 · 发表于 2009-3-4 22:13:35

我來上报卡巴!!!!

显示全部楼层 · 发表于 2009-3-4 22:16:11

不用了啦~
我跟KASPERSKY工程師說過了
添加了

Hello,
This file is already detected.

Regards, Vladislav Pintiysky
Virus Analyst
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-3-4 22:17:37

好,谢谢你....

显示全部楼层 · 发表于 2009-3-4 22:18:05

https://www.virustotal.com/anali ... 9d39d95af42a445cb4a

显示全部楼层 · 发表于 2009-3-4 22:21:37

雖然他們這樣回復
只是沒把握他們到底會不會添加
因為他們也沒說惡意名稱

你也上報看看吧有時候KABA的分析師脾氣很倔的

[ 本帖最后由黑衣~魂于 2009-3-4 22:23 编辑 ]

显示全部楼层 · 发表于 2009-3-4 22:24:16

一会看看报不报...

显示全部楼层 · 发表于 2009-3-5 18:42:23

Home / Scan for Virus
Kaspersky Virus Scanner

Scanned file: IM.exe - Infected
IM.exe - infected by Trojan-Dropper.Win32.Agent.aira
報了,報了
什麼No malicious code was found in this file.
我就直接問你why not?!

lz可以改標題了

[病毒样本] 真假僵尸？红伞并入TR/Crypt.CFI.Gen，卡巴回复no malicious

本帖子中包含更多资源

回复 14楼 sam.to 的帖子

回复 16楼黑衣~魂的帖子

回复 17楼 sam.to 的帖子

回复 20楼 sam.to 的帖子