[病毒样本] 2+1

显示全部楼层 · 发表于 2009-5-30 16:20:35

to kl

主体在3楼

Hello,

CrystalCPUID.exe_

No malicious code was found in this file.

hb3hr.exe_ - Trojan.Win32.VB.qkj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 sam.to 于 2009-5-30 20:05 编辑 ]

显示全部楼层 · 发表于 2009-5-30 16:24:14

to js

显示全部楼层 · 发表于 2009-5-30 16:24:44

to kl

Hello,

CrystalCPUID.exe1 - Trojan.Win32.VB.qkj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

https://www.virustotal.com/anali ... 858baa37-1243675553

[ 本帖最后由 sam.to 于 2009-5-30 17:26 编辑 ]

显示全部楼层 · 发表于 2009-5-30 16:25:06

to Sophos

显示全部楼层 · 发表于 2009-5-30 16:26:00

Begin scan in 'D:\TDDownload\cpu.rar'
D:\TDDownload\cpu.rar
Begin scan in 'D:\TDDownload\CrystalCPUID.zip'
  [0] Archive type: RAR
--> hb3hr.exe1
   [DETECTION] Contains HEUR/Malware suspicious code
D:\TDDownload\CrystalCPUID.zip
  [0] Archive type: ZIP
--> CrystalCPUID.exe1
   [1] Archive type: RAR SFX (self extracting)
   --> hb3hr.exe
      [DETECTION] Contains HEUR/Malware suspicious code

显示全部楼层 · 发表于 2009-5-30 16:27:23

微点杀毒高启发MISS

显示全部楼层 · 发表于 2009-5-30 16:45:19

Sophos Anti-Virus
Virus data version 4.23E, November 2007
>>> File "C:\Scan\cpu.rar\hb3hr.exe1" has been identified as suspicious 'Sus/Malware-B'.
>>> File "C:\Scan\CrystalCPUID.zip\CrystalCPUID.exe1\SfxArchiveData\hb3hr.exe" has been identified as suspicious 'Sus/Malware-B'.

显示全部楼层 · 发表于 2009-5-30 16:58:34

不过,生成物的位置很可疑

[ 本帖最后由 sam.to 于 2009-5-30 17:08 编辑 ]

显示全部楼层 · 发表于 2009-5-30 17:20:06

我沒有換过

显示全部楼层 · 发表于 2009-5-30 17:24:29

败了我说1楼那个 CPUID 怎么能释放那个什么 hbxxx

原来顶楼那个 CPUID 是原版的 - -

[病毒样本] 2+1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 10楼 J-F-F 的帖子

浏览过的版块