2x 在毒网分析中，偶然碰见的

显示全部楼层 · 发表于 2009-5-7 06:37:43

昨天论坛网友刚解出来的网马，我正好也去学习一下！没想到那个网马的病毒下载地址也更新了！

http://a1.igr5s.com/1/AvticvX.exe
http://a1.igr5s.com/1/vX.exe

kaba heur ，to kill ！

Hello,

vX.exe - Worm.Win32.AutoRun.afvk
AvticvX.exe - Worm.Win32.AutoRun.agms

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由幸福的猪猪于 2009-5-7 09:12 编辑 ]

显示全部楼层 · 发表于 2009-5-7 09:36:48

过费尔

显示全部楼层 · 发表于 2009-5-7 09:40:50

卡巴拦截第二个
检测到：病毒 Worm.Win32.AutoRun.afvk URL: http://bbs.kafan.cn/attachment.p ... 8/TDDOWNLOAD/vX.exe

显示全部楼层 · 发表于 2009-5-7 10:09:51

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... 06&t=1241662123
Information Is the TR/Killav.PN Trojan

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.160, VDF 7.1.3.164Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... ff&t=1241662123
Information Is the TR/Killav.PN Trojan

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.160, VDF 7.1.3.164

显示全部楼层 · 发表于 2009-5-7 10:16:25

Miss

显示全部楼层 · 发表于 2009-5-7 11:20:46

两个红伞都干掉啦。

显示全部楼层 · 发表于 2009-5-7 14:34:34

Win32:Rootkit-gen [Rtk]
Win32:Rootkit-gen [Rtk]
小AKILL

显示全部楼层 · 发表于 2009-5-7 18:13:49

panda cloud found nothing
panda的這個雲沒有想像中的有戰鬥力
還是回到原本的特徵庫掃描
難怪free

显示全部楼层 · 发表于 2009-5-7 18:17:18

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
529647&k=af30cb422a2785a6bbd18f10b14bf37
3&t=1241691407

发生下列错误：

请求的对象被感染，发现下列病毒 Worm.Win32.AutoRun.agms

如有疑问，请联系您的技术支持
创建日期：
Thu May 07 18:17:02 2009
Kaspersky Lab

显示全部楼层 · 发表于 2009-5-7 19:56:38

两个都被卡巴报了

[病毒样本] 2x 在毒网分析中，偶然碰见的

本帖子中包含更多资源

ESET NOD32 Antivirus