小试牛刀，过卡巴

星空下的吻

貌似很旧的样本了，为什么卡巴还没有反应呢？？？

等待处理

星空下的吻

沙发自己的

ll47548205

2009-08-16 20:15:41    创建文件      操作:阻止
进程路径:D:\新建文件夹\004.exe
文件路径:C:\WINDOWS\system\004.dll
触发规则:所有程序规则->系统关键位置规则->%WinDir%\*.dll


2009-08-16 20:15:41    运行应用程序      操作:阻止
进程路径:D:\新建文件夹\004.exe
文件路径:C:\WINDOWS\system32\regsvr32.exe
命令行:C:\WINDOWS\system\004.dll /s
触发规则:所有程序规则->全局禁运->*


2009-08-16 20:15:47    运行应用程序      操作:阻止
进程路径:D:\新建文件夹\001.exe
文件路径:C:\WINDOWS\system32\conime.exe
触发规则:所有程序规则->全局禁运->*


2009-08-16 20:15:56    运行应用程序      操作:阻止
进程路径:D:\新建文件夹\003.exe
文件路径:C:\WINDOWS\system32\conime.exe
触发规则:所有程序规则->全局禁运->*


2009-08-16 20:15:56    创建文件      操作:阻止
进程路径:D:\新建文件夹\003.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\~8.bat
触发规则:所有程序规则->Temp文件夹规则->?:\Documents and Settings\*\Local Settings\Temp\*.bat


2009-08-16 20:16:09    创建文件      操作:阻止
进程路径:D:\新建文件夹\006.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\bt7865.bat
触发规则:所有程序规则->Temp文件夹规则->?:\Documents and Settings\*\Local Settings\Temp\*.bat


2009-08-16 20:16:09    运行应用程序      操作:阻止
进程路径:D:\新建文件夹\006.exe
文件路径:C:\WINDOWS\system32\dwwin.exe
命令行:-x -s 176
触发规则:所有程序规则->全局禁运->*


2009-08-16 20:16:09    运行应用程序      操作:阻止
进程路径:D:\新建文件夹\006.exe
文件路径:C:\WINDOWS\system32\drwtsn32.exe
命令行:-p 1952 -e 140 -g
触发规则:所有程序规则->全局禁运->*

尤金卡巴斯基

To KL

悠柚

to IObit

尤金卡巴斯基

Hello,


001.exe, 002.exe, 003.exe, 004.exe, 005.EXE, 006.exe

No malicious code were found in these files.

Best Regards, NewVirus

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

又要上诉

KasperskyIS

ESET Smart Security 4.0.441 : C:\Users\Administrator\Desktop\小毒包.rar > RAR > 004.exe - Win32/TrojanDownloader.Agent.PIZ 特洛伊木马 - 是已删除对象的一部分
C:\Users\Administrator\Desktop\小毒包.rar > RAR > 006.exe - BAT/TrojanDropper.Agent.NAC 特洛伊木马

残缺的唯美

Trojan.Downloader.Small.ABIP (virus)
C:\Users\ekincheng\Desktop\1.rar
C:\Users\ekincheng\Desktop\1.rar\004.exe
Backdoor.Hupigon.30293 (virus)
C:\Users\ekincheng\Desktop\1.rar\002.exe
Trojan.Generic.1568657 (virus)
C:\Users\ekincheng\Desktop\1.rar\003.exe

fatezero

Filename	Result
001.exe	FALSE POSITIVE

The file '001.exe' has been determined to be 'FALSE POSITIVE'.In particular this means that this file is not malicious but a false alarm.Detection is removed from our virus definition file (VDF) with the version: 7.0.5.134.

Filename	Result
002.exe	MALWARE

The file '002.exe' has been determined to be 'MALWARE'.
Our analysts named the threat BDS/Hupigon.30293.2.The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.07.35.

Filename	Result
003.exe	UNDER ANALYSIS

The file '003.exe' has been determined to be 'UNDER ANALYSIS'.

Filename	Result
004.exe	MALWARE

The file '004.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Microjoin.X.The term "TR/" denotes a trojan horse that is able to spy out data, toviolate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename	Result
005.EXE	CLEAN

The file '005.EXE' has been determined to be 'CLEAN'.Our analysts did not discover any malicious content.

Filename	Result
006.exe	CLEAN

The file '006.exe' has been determined to be 'CLEAN'.Our analysts did not discover any malicious content.

刘皓南

Trojan.Downloader.Small.ABIP (virus)
C:\Users\ekincheng\Desktop\1.rar
C:\Users\ekincheng\Desktop\1.rar\004.exe
Backdoor.Hupigon.30293 (virus)
C:\Users\ekincheng\Desktop\1.rar\002.exe
Trojan.Generic.1568657 (virus)
C:\Users\ekincheng\Desktop\1.rar\003.exe