综合下载型

显示全部楼层 · 发表于 2009-6-26 10:25:09

首先是这个东西

然后,打开了这个
http://www.shenlan-2008.com/2009/xx.txt

最后,下载了六个
http://xx.ctivnn.cn/c.exe
http://www.disk366.cn/ys.exe
http://www.keesunhangzhou.cn/setup1000.exe
http://s10248s0s.tzsx226.2666.com.cn/msn193.exe
http://2046yxwcom.tzsx229.2666.com.cn/9.exe
http://s10248s0s.tzsx226.2666.com.cn/026.exe
打包传上来.

显示全部楼层 · 发表于 2009-6-26 10:27:10

XX启发：G:\virus\xx.zip
  [0] Archive type: ZIP
--> xx.exe
   [DETECTION] Contains HEUR/Crypted suspicious code

G:\virus\Downloads.rar
  [0] Archive type: RAR
--> setup1000.exe
   [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
--> 9.exe
   [DETECTION] Is the TR/Drop.Agent.xkd Trojan
--> 026.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
--> msn193.exe
   [1] Archive type: NSIS
   [DETECTION] Contains recognition pattern of the ADSPY/Agent.161009 adware or spyware
--> ys.exe
   [1] Archive type: RSRC
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
MISS ONE
启发MISS一起上报

25382479	c.exe	102.5 KB	UNDER ANALYSIS
25382480	xx.exe	2.55 KB	UNDER ANALYSIS

[ 本帖最后由 HC303 于 2009-6-26 10:30 编辑 ]

显示全部楼层 · 发表于 2009-6-26 10:30:01

ADSPY/Agent.161009
TR/Crypt.ZPACK.Gen
TR/Crypt.FKM.Gen
TR/Drop.Agent.xkd
TR/Crypt.FKM.Gen

c.exe红伞不报

[ 本帖最后由 hdlcpqs 于 2009-6-26 10:31 编辑 ]

显示全部楼层 · 发表于 2009-6-26 10:32:50

瑞星2010杀了3个，其他上报云安全

显示全部楼层 · 发表于 2009-6-26 11:02:50

MSE报毒！

显示全部楼层 · 发表于 2009-6-26 11:06:59

TF+微点

显示全部楼层 · 发表于 2009-6-26 11:30:20

瑞星 Trojan.Spy.Win32.Undef.jz

显示全部楼层 · 发表于 2009-6-26 11:36:35

过咖啡8.7i

显示全部楼层 · 发表于 2009-6-26 11:37:19

显示全部楼层 · 发表于 2009-6-26 11:38:19

msn193.exe/data003\data003;C:\Documents and Settings\gxf\桌面\110\Downloads\msn193.exe/data003;Trojan.Popwin.1160;;
data003;C:\Documents and Settings\gxf\桌面\110\Downloads;Archive contains infected objects;;
msn193.exe;C:\Documents and Settings\gxf\桌面\110\Downloads;Archive contains infected objects;;
026.exe;C:\Documents and Settings\gxf\桌面\110\Downloads;Probably DLOADER.Trojan;;

[病毒样本] 综合下载型

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

drweb

浏览过的版块