样本。。。。。。。（已有样本）

wcj20236

卡巴测试者，如果卡巴杀了，就杀了，如果不杀，别说正常啊，免杀卡巴之类的话，别把卡巴毁在你们这样的人手里。

ps.我可没用卡巴测试，在线扫不报。瑞星，在线扫不报。

     微点主动防御-----解压后不报，未运行。

不好意思，样本忘记上了。

[ 本帖最后由 wcj20236 于 2009-7-20 12:34 编辑 ]

llzy3575

此贴无样本

z2665

没看见样本

2288136aa

样本？

62590423

MS我没看懂在说什么

wcj20236

不好意思，各位。样本忘记上了。

z2665

C:\Users\Administrator\Desktop\triyano\C++ & VB Trojan.exe     Artemis!762EAF9BA654
server不报

saga3721

红伞也有漏的

File ID  Filename Size (Byte) Result
25402754  editor.exe  260.5 KB  UNDER ANALYSIS
25287568  Mswinsck.ocx  105.8 KB  MALWARE
545004  ############.txt  1.49 KB  CLEAN
277681  ####.htm  2.86 KB  FALSE POSITIVE
277682  ########.url  77 Byte  CLEAN
25402755  server.exe  270 KB  UNDER ANALYSIS
156968  Mscomctl.ocx  1.01 MB  KNOWN CLEAN


Please find a detailed report concerning each individual sample below:

Filename Result
editor.exe  UNDER ANALYSIS

The file 'editor.exe' has been determined to be 'UNDER ANALYSIS'.

Filename Result
Mswinsck.ocx  MALWARE

The file 'Mswinsck.ocx' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename Result
############.txt  CLEAN

The file '############.txt' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.

Filename Result
####.htm  FALSE POSITIVE

The file '####.htm' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 6.38.1.201.

Filename Result
########.url  CLEAN

The file '########.url' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.

Filename Result
server.exe  UNDER ANALYSIS

The file 'server.exe' has been determined to be 'UNDER ANALYSIS'.

Filename Result
Mscomctl.ocx  KNOWN CLEAN

The file 'Mscomctl.ocx' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Office 2000'.

z2665

C:\Users\Administrator\Desktop\Desktop.rar
  [0] Archive type: RAR
    --> triyano.part1.rar
      [1] Archive type: RAR
      --> C++ & VB Trojan.exe
        [DETECTION] Is the TR/Vhorse.FG Trojan

samtogo

全过...上报卡巴微点瑞星