6个香港产品-VT上只有eset报!!!

显示全部楼层 · 发表于 2009-6-9 13:40:29

https://www.virustotal.com/anali ... c7ab8206-1244526092

http://virscan.org/report/07d0fa55dfabdc4cb4d2e83ca9ae41d6.html

6527c6ba033ca8ef161c9a444a110b79 pfsq6y.exe2
6321891305fd49759d777ea41c1a8d52 k3bj.exe4
672c02a452eae7b763c57997046aec32 gyz5cg.exe3
706af96bbd6d46927a1e1778f6868df0 qx2x.exe1
80238e90db0a2ffdb6cf25c6e3628379 g399p.exe6
a1a91b98b7ff41ca00af0efd95dfbee0 n2k2a6e.exe5

卡巴:
HEUR:Trojan.Win32.Generic

to kl,lavasoft,comodo

Hello,

This file is already detected. Please update your bases.

g399p.exe6
      Worm.Win32.AutoRun.gbf

gyz5cg.exe3
      Worm.Win32.AutoRun.gbg

k3bj.exe4
      Worm.Win32.AutoRun.gbg

n2k2a6e.exe5
      Worm.Win32.AutoRun.gbg

pfsq6y.exe2
      Worm.Win32.AutoRun.gbg

qx2x.exe1
      Worm.Win32.AutoRun.gar

>
>
Regards, Tatarinov Ivan
Virus Analyst

[ 本帖最后由 sam.to 于 2009-6-14 22:42 编辑 ]

显示全部楼层 · 发表于 2009-6-9 13:43:57

09:06:2009 13:43:30 SEARCHTASK "USER_DEFINED" started...
scan item: E:\qx2x.exe1
scan item: E:\pfsq6y.exe2
scan item: E:\gyz5cg.exe3
scan item: E:\k3bj.exe4
scan item: E:\n2k2a6e.exe5
scan item: E:\g399p.exe6
File scanned: E:\qx2x.exe1 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\pfsq6y.exe2 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\gyz5cg.exe3 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\k3bj.exe4 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\n2k2a6e.exe5 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\g399p.exe6 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
09:06:2009 13:43:31 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 6
Virus found: 6
----------------------------------------------------

显示全部楼层 · 发表于 2009-6-9 13:53:25

小A以及微点扫描MISS，样本太多了没敢测试主防........要累死。

显示全部楼层 · 发表于 2009-6-9 14:09:26

VBA32
C:\Scan\install\g399p.exe6 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install\gyz5cg.exe3 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install\k3bj.exe4 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install\n2k2a6e.exe5 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install\pfsq6y.exe2 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install\qx2x.exe1 : is suspected of Malware.VB.35 (paranoid heuristics)

显示全部楼层 · 发表于 2009-6-9 16:13:20

这几个样本怎么找到的？

显示全部楼层 · 发表于 2009-6-9 16:19:38

微点主防全K,扫描全飘

显示全部楼层 · 发表于 2009-6-9 17:33:59

奇怪，卡巴下載時就報了

可是到了扫描，　就全飘

显示全部楼层 · 发表于 2009-6-9 18:09:01

显示全部楼层 · 发表于 2009-6-9 23:16:42

to McAfee

显示全部楼层 · 发表于 2009-6-10 00:49:07

原帖由 taihuxian 于 2009-6-9 16:13 发表
这几个样本怎么找到的？

数量這么多，

很大机会是他自己制造的

[病毒样本] 6个香港产品-VT上只有eset报!!!

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源