[病毒样本] 5

显示全部楼层 · 发表于 2009-7-6 14:23:50

ceb3d1d2870613161aafecda96eea6f9 kr3.int
d1c7baabc6fdd2905a25aa203723ba67 sn_pkz.int
88635027d1794b2b1a083bd20c127294 uninstall.exe0
0c0e0a8c70aa434a782678c8bea049c1 7k44_up.int
3c3a94e621eb36fd7142f4e783a43ffc np_pkz.int
to kl,eset,comodo,大師

https://www.virustotal.com/anali ... 401eabf8-1246861629

http://sample.nod32.com.hk/index ... 2ccf3656d8c16a59717

Hello,

7k44_up.int, kr3.int, np_pkz.int, sn_pkz.int, uninstall.exe0 - Trojan.Win32.Swizzor.b

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由 sam.to 于 2009-7-6 20:44 编辑 ]

显示全部楼层 · 发表于 2009-7-6 14:29:05

IKARUS - T3SCAN V1.32.10.0 (WIN32)
      T3 V1.01.64
      Copyright (c) 2006 - 2009 by Ikarus Software.
      All rights reserved.

Signature-database from 6.7.2009 04:05:47 (Build: 72984)

e:\0005.rar:kr3.int - Signature 'Trojan-Downloader.Win32.Swizzor' found
e:\0005.rar:uninstall.exe0 - Signature 'Trojan.Win32.Obfuscated' found
e:\0005.rar:sn_pkz.int - Signature 'Trojan.Swizzor' found
e:\0005.rar:np_pkz.int - Signature 'Trojan.Win32.Obfuscated' found
e:\0005.rar:7k44_up.int - Signature 'Virus.Trojan.Win32.Obfuscated' found
e:\0005.rar - Signature 'Virus.Trojan.Win32.Obfuscated' found

      6 Files scanned
      (1 Archiv with 5 files)
      6 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.500

显示全部楼层 · 发表于 2009-7-6 14:43:07

红伞MISS ONE
上报一下。

显示全部楼层 · 发表于 2009-7-6 16:19:53

To MP

显示全部楼层 · 发表于 2009-7-6 17:32:42

Begin scan in 'G:\0005.rar'
G:\0005.rar
  [0] Archive type: RAR
--> kr3.int
   [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
--> uninstall.exe0
   [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
--> np_pkz.int
   [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
--> 7k44_up.int
   [DETECTION] Is the TR/Dldr.Swizzor.Gen Trojan
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2009-7-6 22:37:06

McAfee 报了2个。。

显示全部楼层 · 发表于 2009-7-7 02:00:51

Sophos 杀！

[病毒样本] 5

本帖子中包含更多资源

5个还往多引擎放，谁知道查出几个！