QVOD样本2

显示全部楼层 · 发表于 2009-7-7 11:34:02

http://www.brsbox.com/filebox/down/fc/54dfa7d44162c75e12c20aca46d9505e
PS一句
部分文件是干净的[:26:]

剔出正常文件后上传

[ 本帖最后由 promised 于 2009-7-7 16:49 编辑 ]

显示全部楼层 · 发表于 2009-7-7 11:50:35

to kl,ll

7/7/2009 11:56:06 Detected: Trojan.Win32.StartPage.dwg C:\Documents and Settings\kato\桌面\qvod\2c4e5515274cdff2d1afd65aee4cbc51/setup1.02.exe
7/7/2009 11:56:06 Detected: Trojan-Downloader.Win32.VB.oxd C:\Documents and Settings\kato\桌面\qvod\0e1171cafc348f579f490ea969cee888/A33.exe
7/7/2009 11:56:27 Detected: Trojan-Dropper.Win32.Mudrop.bby C:\Documents and Settings\kato\桌面\qvod\0e1171cafc348f579f490ea969cee888/vvv.exe/NSPack

[ 本帖最后由 sam.to 于 2009-7-7 11:57 编辑 ]

显示全部楼层 · 发表于 2009-7-7 13:49:11

谁给提取出来

显示全部楼层 · 发表于 2009-7-7 16:50:02

见附件

显示全部楼层 · 发表于 2009-7-7 16:56:38

File ID    Filename    Size (Byte)    Result
25391616    A11.exe    50 KB    UNDER ANALYSIS
25391617    A22.exe    36 KB    UNDER ANALYSIS
25391618    nsdycom.exe    102.42 KB    UNDER ANALYSIS
25391619    setup1.02.exe    36 KB    UNDER ANALYSIS
25391620    wps.exe    52 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2009-7-7 17:41:18

IKARUS - T3SCAN V1.32.10.0 (WIN32)
      T3 V1.01.64
      Copyright (c) 2006 - 2009 by Ikarus Software.
      All rights reserved.

Signature-database from 7.7.2009 08:01:17 (Build: 72992)

e:\qvod\A11.exe - Signature 'BAT.Trojan.FormatCQ' found
e:\qvod\A33.exe - Signature 'Trojan-Downloader.Win32.VB' found
e:\qvod\d821e0.exe - Signature 'Trojan-Dropper.Agent' found
e:\qvod\setup1.02.exe - Signature 'Trojan.Win32.VB' found
e:\qvod\vvv.exe - Signature 'Trojan-Dropper.Agent' found
e:\qvod\wps.exe - Signature 'HackTool.Win32.Jakuz' found
e:\qvod\func.dll - Signature 'Virus.Win32.Agent.BQC' found

      11 Files scanned
      (1 Archiv with 1 file)
      7 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.516

显示全部楼层 · 发表于 2009-7-7 17:46:24

mpav 5个

[病毒样本] QVOD样本2

本帖子中包含更多资源

回复 3楼 mofunzone 的帖子