一整套病毒包

coolife

从国外站扫来的

IllusionWing

UGuard v6 - 扫描日志

Z:\VirusCollection\others\0807\a\spoolsv.exe -> Packed.tElock

日志结束。

only one

悠柚

Starting the file scan:

Begin scan in 'D:\TDDownload\a\avkill.bat'
Begin scan in 'D:\TDDownload\a\cygcrypt-0.dll'
Begin scan in 'D:\TDDownload\a\cygwin1.dll'
D:\TDDownload\a\avkill.bat
Begin scan in 'D:\TDDownload\a\d0'
Begin scan in 'D:\TDDownload\a\fprt.exe'
Begin scan in 'D:\TDDownload\a\info.exe'
Begin scan in 'D:\TDDownload\a\lsass.exe'
Begin scan in 'D:\TDDownload\a\lsass.ocx'
Begin scan in 'D:\TDDownload\a\lsass.win'
Begin scan in 'D:\TDDownload\a\pskill.exe'
Begin scan in 'D:\TDDownload\a\s0'
Begin scan in 'D:\TDDownload\a\sd.exe'
Begin scan in 'D:\TDDownload\a\service.exe'
Begin scan in 'D:\TDDownload\a\ServUDaemon.ini'
Begin scan in 'D:\TDDownload\a\ServUDaemon.win'
Begin scan in 'D:\TDDownload\a\ServUStartUpLog.txt'
    [DETECTION] Contains recognition pattern of the BAT/KillAV.af.1 batch virus
Begin scan in 'D:\TDDownload\a\spoolsv.exe'
D:\TDDownload\a\lsass.exe
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Iroffer.AB.14 back-door program
D:\TDDownload\a\pskill.exe
    [DETECTION] Is the TR/Agent.35840.B Trojan
D:\TDDownload\a\sd.exe
    [DETECTION] Contains recognition pattern of the SPR/Hacktool.SRunner.H program
D:\TDDownload\a\service.exe
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Ibounce.A.1 back-door program
Begin scan in 'D:\TDDownload\a\srunner.exe'
D:\TDDownload\a\spoolsv.exe
    [DETECTION] Contains recognition pattern of the SPR/Serv-U.Gen program
Begin scan in 'D:\TDDownload\a\tlist.exe'
D:\TDDownload\a\srunner.exe
    [DETECTION] Contains recognition pattern of the SPR/Hcktl.Exe.285.2 program

all to IObit

angir

part-1下载不了，卡在30.4%

刘皓南

这样也可以啊,菜鸟逛逛

angir

没有质量的一堆LJ而已，全部要用到CMD命令。。
真不知道上报后微点入不入库啊~

gzy_hao

ServUDaemon.ini
ServUDaemon.txt
不是病毒

gzy_hao

s0
d0
也不是病毒

gzy_hao

lsass.win
ServUDaemon.win
好像也不是毒

Palkia

查询编号：RS20090807145415734808
文件名称：a.rar
文件MD5：5291E0934B6025F4ABB0EE5083D153DA
文件状态：分析中