3x

幸福的猪猪

不知道算不算是病毒样本。。。

下载地址：（已经上报卡巴斯基）

http://2010down.cn/addown2009820/download/winyy.exe

http://2010down.cn/addown2009820/download/winwps.exe

http://microsoftdown.cn/addown.cn/1002.exe

http://2010down.cn/addown2009820/download/winshou.exe

p.s. 2.rar是上面图所示的下载地址，下载回来的样本。卡巴斯基识别两个个，另外一个不能识别，已经上报，给予查杀。其中有两个连接已经失效）

[ 本帖最后由 幸福的猪猪 于 2009-8-24 16:33 编辑 ]

hj5abc

origin...



[ 本帖最后由 hj5abc 于 2009-8-24 16:26 编辑 ]

失落的手链

瑞星2010
Trojan.Win32.Generic.11EC95D3

失落的手链

瑞星2010
查询编号：RS20090824161932687782
文件名称：2.rar
文件MD5：A80A5EF5DCC2C0DB5413C4CD20F730B7
文件状态：压缩文件，包含2个文件

文件名	MD5	状态	病毒名称	解决版本号
75ea9b414651cd...	75EA9B414...	病毒文件	Trojan.Win32.Generic.1...	22.10.00.06
83bb74408e6010...	83BB74408...	病毒文件	Trojan.Win32.Generic.1...	22.10.00.06

mcafee 清空

czf610632747

ess4查出两只，a2查处2只

newsun

第二个文件红伞报TR/Dropper.Gen

z2665

mse miss 1x，to

曲中求

Start of the scan: 2009年8月24日 星期一  20:19

Starting the file scan:

Begin scan in 'F:\病毒\1[1]'
F:\病毒\1[1]\75ea9b414651cd1ee4ba3562f12a1708
    [DETECTION] Is the TR/VB.Downloader.Gen Trojan
    [WARNING]   The file was ignored!
F:\病毒\1[1]\83bb74408e6010f9e8b152de0056a6e1
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [WARNING]   The file was ignored!
F:\病毒\1[1]\1\62225057e94930948899ec682f59602a
  [0] Archive type: RSRC
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [WARNING]   The file was ignored!


End of the scan: 2009年8月24日 星期一  20:19
Used time: 00:03 Minute(s)

The scan has been done completely.

      2 Scanned directories
    197 Files were scanned
      2 Viruses and/or unwanted programs were found
      1 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
    194 Files not concerned
      1 Archives were scanned
      3 Warnings
      1 Notes

黑衣~魂

-p://2010down.cn/addown2009820/download/winyy.exe
p://2010down.cn/addown2009820/download/winwps.exe
tp://microsoftdown.cn/addown.cn/1002.exe
tp://2010down.cn/addown2009820/download/winshou.exe
--------------
miss 1個的已分析
Your submission has been analyzed. A corresponding record has been added to the Dr.Web virus database and will be available with the next update.

Threat: Trojan.DownLoad.45096

Thank you for the cooperation.
--
Yours sincerely,
Virus Monitoring Service
Doctor Web Ltd.

MD5: cc6636803a4ea3b0bd7936817e5476ee