这个东西很邪门

显示全部楼层 · 发表于 2009-4-8 18:54:10

大家看下报告a-squared 4.0.0.101 2009.04.08 BAT.Silly.w.4!IK
AhnLab-V3 5.0.0.2 2009.04.08 -
AntiVir 7.9.0.138 2009.04.08 -
Antiy-AVL 2.0.3.1 2009.04.08 -
Authentium 5.1.2.4 2009.04.08 -
Avast 4.8.1335.0 2009.04.07 -
AVG 8.5.0.285 2009.04.08 -
BitDefender 7.2 2009.04.08 BehavesLike:Bat.FileInfector
CAT-QuickHeal 10.00 2009.04.08 -
ClamAV 0.94.1 2009.04.08 BAT.Drop.Agent
Comodo 1102 2009.04.07 Unclassified Malware
DrWeb 4.44.0.09170 2009.04.08 -
eSafe 7.0.17.0 2009.04.07 -
eTrust-Vet 31.6.6444 2009.04.08 -
F-Prot 4.4.4.56 2009.04.08 -
Fortinet 3.117.0.0 2009.04.08 BAT/SuperHid.A!tr
GData 19 2009.04.08 BehavesLike:Bat.FileInfector
Ikarus T3.1.1.49.0 2009.04.08 BAT.Silly.w.4
K7AntiVirus 7.10.695 2009.04.07 -
Kaspersky 7.0.0.125 2009.04.08 -
McAfee 5577 2009.04.07 Bat/sdel
McAfee+Artemis 5577 2009.04.07 Bat/sdel
McAfee-GW-Edition 6.7.6 2009.04.08 -
Microsoft 1.4502 2009.04.08 -
NOD32 3994 2009.04.07 -
Norman 6.00.06 2009.04.08 -
nProtect 2009.1.8.0 2009.04.08 -
Panda 10.0.0.14 2009.04.07 -
PCTools 4.4.2.0 2009.04.07 -
Prevx1 V2 2009.04.08 -
Rising 21.24.22.00 2009.04.08 -
Sophos 4.40.0 2009.04.08 -
Sunbelt 3.2.1858.2 2009.04.08 -
Symantec 1.4.4.12 2009.04.08 -
TheHacker 6.3.4.0.303 2009.04.08 -
TrendMicro 8.700.0.1004 2009.04.08 -
VBA32 3.12.10.2 2009.04.08 -
ViRobot 2009.4.7.1684 2009.04.08 -
VirusBuster 4.6.5.0 2009.04.07 -
附加信息
File size: 333872 bytes
MD5...: 19d61be0aef5a86ff5304dfa5256f33b
SHA1..: 158d7b5a49a07beaa15956ccfc75d067d4000ed2
SHA256: 037d0c9cdeb2e5f8cd0551a7f616de2305b4fbb4f06693d590f75e21729ce47a
SHA512: beeda267628ebfba631c1150e65a7a8b7f8713f00459dbd51a08e29970eaf810
3a0ec4328b7a7ef5f17ea4c053be66a7c1c12963b3124618304d7bc076d66c9f
ssdeep: 6144:KoJ+7CZhRh8ZKddZ4l4nxMbFAqSBYX3xI9AhSH62F:xJFhTulaxMmjB4S9B
H62F
PEiD..: -
TrID..: File type identification
RAR Archive (83.3%)
REALbasic Project (16.6%)
PEInfo: -
RDS...: NSRL Reference Data Set
-
packers (Kaspersky): DebugScript

显示全部楼层 · 发表于 2009-4-8 19:03:12

国产的应该都不会报

显示全部楼层 · 发表于 2009-4-8 19:06:12

病毒扫描时已过NOD32，没测试到病毒,大家有空就测试一下吧！！！

显示全部楼层 · 发表于 2009-4-8 19:10:37

过卡巴

显示全部楼层 · 发表于 2009-4-8 19:15:14

bit报了一个

显示全部楼层 · 发表于 2009-4-8 20:56:11

Dear Sir or Madam,

Thank you for your recent inquiry.

The files you have sent us represent a bigger collection of malware.
Our virus lab will check the files and integrate new signatures in one of our next updates.

We thank you for your assistance.

Attachment(s) you sent:
- C5yYXI___

--
Freundliche Gruesse / Kind regards
Avira GmbH

显示全部楼层 · 发表于 2009-4-8 21:00:12

全是CMD ，BAT，我不测了~~~~~~~

显示全部楼层 · 发表于 2009-4-8 23:42:30

这算是什么样本, 都是批处理bat

[可疑文件] 这个东西很邪门

本帖子中包含更多资源