可疑，99% 过系列

显示全部楼层 · 发表于 2007-2-2 17:04:04

原帖由 navigateqd 于 2007-2-2 16:57 发表

还有其他几个嘛

我这里有大量过卡巴的，看来要找一个更好的在线分析服务器了，要不每次发都等几分钟，浪费时间啊

显示全部楼层 · 发表于 2007-2-2 17:05:57

原帖由 iGod 于 2007-2-2 16:58 发表

这个文件坏了呀

你再下一次确认一下？我在这里打包的，测试没有问题。如果你确认，那我再上传。因为我这里要用蜗牛代理才能下文件的

显示全部楼层 · 发表于 2007-2-2 17:36:33

感谢提供样本，antivir只挂一个
已上报
A listing of files contained inside archives alongside their results can be found below:File ID    Filename    Size (Byte) Result
201578    kcsiss.exe    20.480    UNDER ANALYSIS

Please find a detailed report concerning each individual sample below: Filename Result
kcsiss.exe    UNDER ANALYSIS

The file 'kcsiss.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2007-2-2 21:57:57

这么多？你们玩！

显示全部楼层 · 发表于 2007-2-3 10:31:01

怎么会有认嫌弃样本多的

显示全部楼层 · 发表于 2007-2-3 10:32:56

kcsiss.exe已经确定为误报，lz检查一下
Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00010208.

A listing of files contained inside archives alongside their results can be found below:File ID    Filename    Size (Byte) Result
201578    kcsiss.exe    20.480    CLEAN

Please find a detailed report concerning each individual sample below: Filename Result    kcsiss.exe    CLEAN

The file 'kcsiss.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... mp;incidentid=10208

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic".

Kind regards
Avira Virus Lab

显示全部楼层 · 发表于 2007-2-3 12:16:39

QUOTE:
简要说明,只有部分为不可执行文件
Dear Customer,

  Thank you for submitting the samples to Fortinet. Below is the results of our analysis:

  dj.exe - New Detection: W32/Delf.PG!tr.spy
  autorun.pif - New Detection: W32/Agent.HR!tr.dldr
  520.exe - New Detection: W32/Agent.HP!tr.dldr
  msabc.exe  - New Detection: Adware/Alexa
  43.exe - Not malicious
  autorun.inf - Not malicious
  ylofk12.exe - Not malicious
  460fb9c0.qua -  Not malicious
  4612b9c9.qua - Not malicious
  sppoolsv.exe -  W32/Fujacks.U!worm
  oxnexk97.dll  - New Detection: W32/QQHelper.Q!tr.dldr
  103.exe  - Not malicious

  We will add the new detection pattern in the regular update.

                                                                  navigateqd  2007-2-2


这是卡巴么？

显示全部楼层 · 发表于 2007-2-3 13:39:49

原帖由专家于 2007-2-2 20:16 发表
QUOTE:
简要说明,只有部分为不可执行文件
Dear Customer,

Thank you for submitting the samples to Fortinet. Below is the results of our analysis:

dj.exe - New Detection: W32/Delf.PG!tr.sp ...

这个是fortinet
中文飞塔
一个启发bt的软件
基本我电脑能报的exe他的启发都报了一般。。

显示全部楼层 · 发表于 2007-2-3 13:50:56

挺牛的，下一个研究研究

显示全部楼层 · 发表于 2007-2-3 14:46:50

除了MedUtils.rar其它DR web通报!!!

[病毒样本] 可疑，99% 过系列