6个半打(过所有主流)

sam.to

dfd18889b1c33320a118182911b1a3fb   file.exe1
76dc5bdffc25bf65c69cb76925100b08   file.exe2
1f47655a2eef174d3f8bd6deaf468e14   file.exe3
20aef294171bd1330524ca8ad5994c22   file.exe4
c9d0d9bc084a32380ab2d85ac6edd18e   file.exe5
3227ac17bdfe74e1eed1c5598bc0810b   file.exe6

卡巴报heur

to kl,eset
https://www.virustotal.com/anali ... 97b812dd-1244277197
http://sample.nod32.com.hk/index ... 08dcf1aa6b6de211681


file.exe1 - Trojan.Win32.TDSS.agag,
file.exe2 - Trojan.Win32.TDSS.agah,
file.exe3 - Trojan.Win32.TDSS.agai,
file.exe4 - Trojan.Win32.TDSS.agak,
file.exe5 - Trojan.Win32.TDSS.agal,
file.exe6 - Trojan.Win32.TDSS.agam

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[ 本帖最后由 sam.to 于 2009-6-6 17:18 编辑 ]

kingmuro

过kav6.0

schumi小粉

to lab

[ 本帖最后由 schumi小粉 于 2009-6-6 16:43 编辑 ]

sam.to

不是,所有文件都有被启发出来

schumi小粉

发错了~

tun

哪来这么多 天天都有
这批 TDSS 品质不大好呀，Sophos 居然开始报可疑，之前的那几批都是全过的
 >>> File "C:\Scan\06.zip\file.exe6" has been identified as suspicious 'Sus/Malware-C'.
 >>> File "C:\Scan\06.zip\file.exe1" has been identified as suspicious 'Sus/Malware-C'.
 >>> File "C:\Scan\06.zip\file.exe2" has been identified as suspicious 'Sus/Malware-C'.
 >>> File "C:\Scan\06.zip\file.exe3" has been identified as suspicious 'Sus/Malware-C'.
 >>> File "C:\Scan\06.zip\file.exe4" has been identified as suspicious 'Sus/Malware-C'.
 >>> File "C:\Scan\06.zip\file.exe5" has been identified as suspicious 'Sus/Malware-C'.

悠柚

D:\TDDownload\file.exe2         已检测: Trojan-Downloader.Win32.Boltolog!IK

BD miss all

D:\TDDownload\file.exe4
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
D:\TDDownload\file.exe5
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
D:\TDDownload\file.exe6
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
D:\TDDownload\file.exe1
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
D:\TDDownload\file.exe2
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
D:\TDDownload\file.exe3
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

ballakay

AVG全飘!

[ 本帖最后由 ballakay 于 2009-6-6 17:07 编辑 ]

poiupoiu

小红伞free报6个

hddu

1，费尔不杀放行。


2，若果把 file.exe1重命名为 file1.exe并运行，EQ拦截报file1.exe 访问服务管理器 。

009-06-06 11:07:58    访问服务管理器      操作:阻止
进程路径:E:\s005\file1.exe
触发规则:所有程序规则->*

009-06-06 11:17:16    访问服务管理器      操作:阻止并结束进程
进程路径:E:\s005\file1.exe
触发规则:所有程序规则->*

[ 本帖最后由 hddu 于 2009-6-6 17:16 编辑 ]