怀疑是viking的变种！

xzthink

viking变种！

tonger2003

解压怎么什么都没有看到~~~

小邪邪

呵呵，好象是，还伪装成系统的隐藏文件，不过我已经直接运行过了，mcafee的规则可以防死

小邪邪

呵呵，其实还有个AUTORUN文件，不过被咖啡直接阻掉了，另一个SETUP程序，要设显示系统隐藏文件才能看见的

mofunzone

感谢提供，的确是新样本，可以运行，但是貌似不是viking的样子
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
203846         setup.exe         18.432         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
setup.exe         UNDER ANALYSIS


The file 'setup.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

xzthink

花了5个小时在网吧取到的新病毒样本！

30分钟让网吧全部瘫痪了，可怕！

solcroft

“美国微点”Cyberhawk报

紫外线

Antivirus	Version	Update	Result
AntiVir	7.3.1.34	02.07.2007 [td]no virus found
Authentium	4.93.8	02.07.2007 [td]no virus found
Avast	4.7.936.0	02.07.2007 [td]no virus found
AVG	386	02.07.2007 [td]no virus found
BitDefender	7.2	02.08.2007	Win32.Worm.Delf.AU
CAT-QuickHeal	9.00	02.07.2007	(Suspicious) - DNAScan
ClamAV	devel-20060426	02.07.2007 [td]no virus found
DrWeb	4.33	02.07.2007 [td]no virus found
eSafe	7.0.14.0	02.07.2007	suspicious Trojan/Worm
eTrust-InoculateIT	30.4.3374	02.07.2007 [td]no virus found
eTrust-Vet	30.4.3374	02.07.2007 [td]no virus found
Ewido	4.0	02.07.2007 [td]no virus found
Fortinet	2.85.0.0	02.07.2007 [td]no virus found
F-Prot	4.2.1.29	02.07.2007 [td]no virus found
F-Secure	6.70.13030.0	02.08.2007	Worm.Win32.Delf.bg
Ikarus	T3.1.0.31	02.07.2007 [td]no virus found
Kaspersky	4.0.2.24	02.08.2007	Worm.Win32.Delf.bg
McAfee	4958	02.07.2007 [td]no virus found
Microsoft	1.2101	02.07.2007 [td]no virus found
NOD32v2	2044	02.07.2007 [td]no virus found
Norman	5.80.02	02.07.2007 [td]no virus found
Panda	9.0.0.4	02.07.2007	Suspicious file
Prevx1	V2	02.08.2007	Covert.Sys.Exec

nod又没报。。

yzt1004

AVG Antispyware挂。上报成功。

驱逐舰88了