5个香港产品-VT上只有eset报!!!

显示全部楼层 · 发表于 2009-6-9 20:58:51

5012cee824d64366c638666466361182 or99a.exe3
c64a7b2fce3adef91fd7e3c763865607 x9qbl.exe1
4aa97788e34e32a1f3ef21a86a6a6e02 a6jf8us.exe2
722f3f3e59ac49416d3ec0adc10f0b9c eedgb.exe5
e7fd48b767fc1dd49b6a7d6033393463 yknk.exe4

卡巴:
Heur.Trojan.Generic

https://www.virustotal.com/anali ... 5a82673f-1244552337

Hello,

a6jf8us.exe_ - Worm.Win32.AutoRun.gax,

eedgb.exe_ - Worm.Win32.AutoRun.gaw,

or99a.exe_ - Worm.Win32.AutoRun.gav,

x9qbl.exe_ - Worm.Win32.AutoRun.gau,

yknk.exe_ - Worm.Win32.AutoRun.gat

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

TO KL

[ 本帖最后由 sam.to 于 2009-6-9 22:04 编辑 ]

显示全部楼层 · 发表于 2009-6-9 21:27:40

？？？样本呢？

显示全部楼层 · 发表于 2009-6-9 22:04:48

看起来挺强悍

显示全部楼层 · 发表于 2009-6-9 23:03:44

File scanned: E:\x9qbl.exe1 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\a6jf8us.exe2 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\or99a.exe3 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\yknk.exe4 - SIGNATURE FOUND "HackTool.Win32.PHPWind"
File scanned: E:\eedgb.exe5 - SIGNATURE FOUND "HackTool.Win32.PHPWind"

显示全部楼层 · 发表于 2009-6-9 23:17:27

to McAfee

显示全部楼层 · 发表于 2009-6-9 23:55:56

VBA32
C:\Scan\install5\a6jf8us.exe2 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install5\eedgb.exe5 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install5\or99a.exe3 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install5\x9qbl.exe1 : is suspected of Malware.VB.35 (paranoid heuristics)
C:\Scan\install5\yknk.exe4 : is suspected of Malware.VB.35 (paranoid heuristics)

显示全部楼层 · 发表于 2009-6-10 00:11:45

TO DW

显示全部楼层 · 发表于 2009-6-10 08:25:45

卡巴
检测到：病毒 Worm.Win32.AutoRun.gau URL: http://bbs.kafan.cn/attachment.p ... 4593481//x9qbl.exe1

显示全部楼层 · 发表于 2009-6-26 11:39:54

微软杀毒没反应

显示全部楼层 · 发表于 2009-6-26 16:13:03

熊猫云端扫描全干掉

[病毒样本] 5个香港产品-VT上只有eset报!!!

本帖子中包含更多资源