TDSSX3

显示全部楼层 · 发表于 2009-5-20 11:45:17

to kl(报heur)
BA67C22B216938AB9BE992736B2973BD.exe4
B1369953521C8EB4D676B7712B87C5D0.exe$
A484682EBC882DB7C664AF4251BB7EBB.exe&

https://www.virustotal.com/anali ... a6f354a92cc07714d5c
http://sample.nod32.com.hk/index ... 3ef9390242a3b4aef8d

A484682EBC882DB7C664AF4251BB7EBB.exe& - Trojan-Downloader.Win32.Boltolog.edf
B1369953521C8EB4D676B7712B87C5D0.exe$ - Trojan-Downloader.Win32.Boltolog.edg
BA67C22B216938AB9BE992736B2973BD.exe4 - Trojan-Downloader.Win32.Boltolog.edh

[ 本帖最后由 sam.to 于 2009-5-20 18:14 编辑 ]

显示全部楼层 · 发表于 2009-5-20 11:46:20

微点AV miss
上报

显示全部楼层 · 发表于 2009-5-20 11:52:03

过avast4.8

显示全部楼层 · 发表于 2009-5-20 11:52:03

--> BA67C22B216938AB9BE992736B2973BD.exe4
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
--> B1369953521C8EB4D676B7712B87C5D0.exe$
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
--> A484682EBC882DB7C664AF4251BB7EBB.exe&
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

显示全部楼层 · 发表于 2009-5-20 11:56:30

miss 1
File scanned: D:\virus\3\A484682EBC882DB7C664AF4251BB7EBB.exe& - SIGNATURE FOUND "Packed.Win32.Tdss"
File scanned: D:\virus\3\BA67C22B216938AB9BE992736B2973BD.exe4 - SIGNATURE FOUND "Packed.Win32.Tdss"

显示全部楼层 · 发表于 2009-5-20 11:58:25

Last infection: bbs.kafan.cn
Infected with: Trojan.TDss.RV

显示全部楼层 · 发表于 2009-5-20 14:24:21

ikarus报毒保存删除

显示全部楼层 · 发表于 2009-5-20 15:17:58

AVIRIA 报毒为TR/Crypt.XPACK.Gen - Trojan

显示全部楼层 · 发表于 2009-5-20 15:30:29

显示全部楼层 · 发表于 2009-5-20 16:04:27

运行后，进程迅速消失，没看到动作

[ 本帖最后由 ahu2422 于 2009-5-20 16:05 编辑 ]

[病毒样本] TDSSX3

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块