IRC.Sdbot-x1- vt-x3

黑衣~魂

drweb
IMG0006529877321151882-JPG.zip/IMG0006529877321151882-JPG.EXE\reptile.exe;C:\Documents and Settings\all\桌面\IMG0006529877321151882-JPG.zip/IMG0006529877321151882-JPG.EXE;BackDoor.IRC.Sdbot.4922;;
IMG0006529877321151882-JPG.EXE;C:\Documents and Settings\all\桌面;Archive contains infected objects;;
IMG0006529877321151882-JPG.zip;C:\Documents and Settings\all\桌面;Archive contains infected objects;;


virustotal
http://www.virustotal.com/analisis/558c827d3e0f2d5af4d9e9aeff7bd1615db78a36859a3c12c285b9922f46790a-1250575184

[ 本帖最后由 黑衣~魂 于 2009-8-18 15:57 编辑 ]

黑衣~魂

uared	4.5.0.24	2009.08.17	-
AhnLab-V3	5.0.0.2	2009.08.18	-
AntiVir	7.9.1.1	2009.08.17	-
Antiy-AVL	2.0.3.7	2009.08.17	-
Authentium	5.1.2.4	2009.08.18	-
Avast	4.8.1335.0	2009.08.17	-
AVG	8.5.0.406	2009.08.17	-
BitDefender	7.2	2009.08.18	-
CAT-QuickHeal	10.00	2009.08.17	-
ClamAV	0.94.1	2009.08.18	-
Comodo	1995	2009.08.18	-
DrWeb	5.0.0.12182	2009.08.18	-
eSafe	7.0.17.0	2009.08.17	-
eTrust-Vet	31.6.6683	2009.08.18	-
F-Prot	4.4.4.56	2009.08.16	-
F-Secure	8.0.14470.0	2009.08.18	-
Fortinet	3.120.0.0	2009.08.18	-
GData	19	2009.08.18	-
Ikarus	T3.1.1.68.0	2009.08.18	-
Jiangmin	11.0.800	2009.08.18	-
K7AntiVirus	7.10.820	2009.08.17	-
Kaspersky	7.0.0.125	2009.08.18	-
McAfee	5712	2009.08.17	-
McAfee+Artemis	5712	2009.08.17	Artemis!597C3CA9D1BB
McAfee-GW-Edition	6.8.5	2009.08.17	-
Microsoft	1.4903	2009.08.18	VirTool:Win32/CeeInject.gen!U
NOD32	4343	2009.08.18	-
Norman		2009.08.17	-
nProtect	2009.1.8.0	2009.08.17	Trojan/W32.Agent.104960.BV
Panda	10.0.0.14	2009.08.17	-
PCTools	4.4.2.0	2009.08.17	-
Prevx	3.0	2009.08.18	-
Rising	21.43.10.00	2009.08.18	-
Sophos	4.44.0	2009.08.18	-
Sunbelt	3.2.1858.2	2009.08.18	-
Symantec	1.4.4.12	2009.08.18	-
TheHacker	6.3.4.3.383	2009.08.13	-
TrendMicro	8.950.0.1094	2009.08.18	-
VBA32	3.12.10.9	2009.08.18	-
ViRobot	2009.8.18.1888	2009.08.18	-
VirusBuster	4.6.5.0	2009.08.17	-

幸福的猪猪

上报卡巴斯基，小红伞，给予查杀。


上报卡巴启发出来的样本，回信的速度就是快呀！


Hello,


reptile.exe - Trojan.Win32.Buzus.bupk

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.



Please find a detailed report concerning each individual sample below:

?Filename	Result
reptile.exe	MALWARE

The file 'reptile.exe' has been determined to be 'MALWARE'.
Our analysts discovered that the file is a Worm. In particular it is a 'bot' which allows an attacker to gain complete control over the affected computer. Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 幸福的猪猪 于 2009-8-19 08:04 编辑 ]

Mr.Z

Artemis發威

星空下的吻

卡巴 kill

江湖的fans

TO   RISING

z2665

微软的gen依然强大

luxiao200888

C:\Documents and Settings\Owner\桌面\reptile.rar > RAR > reptile.exe - IRC/SdBot 特洛伊木马