[病毒样本] 2

显示全部楼层 · 发表于 2009-7-11 18:19:54

http://www.glintsun.com/include/1.exe
http://www.glintsun.com/include/2.exe

哪个好心人上报给KL下
两个均需上报，因为虽然现在检测1.exe为Trojan-Dropper.Win32.Agent.arlk
但是其实这只是报里面的svchost.exe，里面还捆绑了一个internet.exe不报

PS：居然看到毒霸启发了

瑞星
RS20090711180830328159

http://virscan.org/report/8f6bfecf2a29ceea5217416094b14805.html
http://virscan.org/report/c9c5dc8a6af5c5b50ceda5e99fe653a8.html

[ 本帖最后由 ghj89100062 于 2009-7-11 18:21 编辑 ]

显示全部楼层 · 发表于 2009-7-11 18:20:56

IKARUS - T3SCAN V1.32.10.0 (WIN32)
      T3 V1.01.64
      Copyright (c) 2006 - 2009 by Ikarus Software.
      All rights reserved.

Signature-database from 11.7.2009 08:01:18 (Build: 73015)

e:\2.rar:1.exe:[unnamed]:internet.exe - Signature 'Generic.Botget' found
e:\2.rar:1.exe:[unnamed]:svchost.exe - Signature 'Trojan-Dropper.Delf' found
e:\2.rar:1.exe:[unnamed]:svchost.exe - Signature 'Trojan-Dropper.Delf' found
e:\2.rar:2.exe - Signature 'Trojan-Dropper.Agent' found
e:\2.rar - Signature 'Trojan-Dropper.Agent' found

      5 Files scanned
      (1 Archiv with 4 files)
      5 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.062

显示全部楼层 · 发表于 2009-7-11 18:23:39

To KL

显示全部楼层 · 发表于 2009-7-11 18:25:29

金山启发

显示全部楼层 · 发表于 2009-7-11 18:36:10

Log is generated by AjLL.

< Sophos >
1.exe --- Found Nothing
2.exe --- Mal/Emogen-E
1.exe\internet.exe --- Sus/ExeScript-A
1.exe\svchost.exe --- Mal/DelpDldr-F

显示全部楼层 · 发表于 2009-7-11 18:36:15

微点

显示全部楼层 · 发表于 2009-7-11 20:27:39

瑞星2010
Trojan.PSW.Win32.GameOL.yvd

显示全部楼层 · 发表于 2009-7-11 21:24:40

URL TO KL

TO LL

显示全部楼层 · 发表于 2009-7-11 21:32:14

f5bc4d7368973acad8d1e9ae94ac2239 System.sy2s
da2dec1512c74a2c9a7e63a683e8f2c7 internet.exe_
卡巴和大師都missed 后者,已上报

显示全部楼层 · 发表于 2009-7-11 21:36:44

红伞杀俩。

[病毒样本] 2

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源