一大一小(16楼有新)

显示全部楼层 · 发表于 2009-9-25 13:49:45

cbf27891883fa673b6c02a8b0673ea3c RichedPack.exe2

https://www.virustotal.com/anali ... 86e1f86e-1253857646

to kl,ll,mcafee,comodo

显示全部楼层 · 发表于 2009-9-25 14:48:17

Avira AntiVir
RichedPack.rar
  [0] Archive type: RAR
--> RichedPack.exe2
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4adcf091.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-9-25 23:45:48

ec68e76865150bf7f512393715be6153 teamspeak4.7.exe2
to kl,ll,mcafee,comodo

https://www.virustotal.com/anali ... cbe3ef3b-1253893431

teamspeak4.7.exe2 - Trojan-Dropper.Win32.MultiBinder.at

[ 本帖最后由 sam.to 于 2009-9-26 16:47 编辑 ]

显示全部楼层 · 发表于 2009-9-26 09:30:21

Avira AntiVir
teamspeak4.7.7z
  [0] Archive type: 7-Zip
--> teamspeak4.7.exe2
   [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '4addf77f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-9-26 09:48:30

瑞星2010

查询编号：RS20090926000517921392
文件名称：teamspeak4.7.7z
文件MD5：1AD83A5AB517758781979D17579926B9
文件状态：安全文件

显示全部楼层 · 发表于 2009-9-26 13:06:58

A3C0181E990FA146B44682FE864D28DB
to kl,ll,mcafee,comodo,eset
https://www.virustotal.com/anali ... c902c59a-1253941542

http://sample.nod32.com.hk/index ... 146b44682fe864d28db

Hello,

teamspeak4.7.exe_11 - Trojan-Dropper.Win32.Agent.bedk

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由 sam.to 于 2009-9-26 14:04 编辑 ]

显示全部楼层 · 发表于 2009-9-26 13:20:52

Multi Command-Line Scanner 报告
-------------------------------------------------------------------------
D:\TDDownload\teamspeak4.7.exe
MD5 Hash: A3C0181E990FA146B44682FE864D28DB

A-squared ----- Backdoor.Win32.GrayBird!IK
AntiVir V7 ----- DR/Delphi.Gen
BitDefender -----Nothing
ClamWin ----- Trojan.QQPass-66
Dr.Web V5 ----- BackDoor.Graybird.3
F-Prot -----Nothing
Mcafee -----Nothing
Panda ----- Suspicious file
Sophos -----Nothing
VBA32 ----- Malware-Cryptor.Win32.General.4

*** 6/10 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------

任务完成 @ 2009-09-26 星期六 13:21:02.59
注意: 结果可能与GUI版本不同。

显示全部楼层 · 发表于 2009-9-26 13:24:00

Avira AntiVir
teamspeak4.7.7z
  [0] Archive type: 7-Zip
--> teamspeak4.7.exe2
   [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
[NOTE]    A backup was created as '4ade2e51.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

[病毒样本] 一大一小(16楼有新)

本帖子中包含更多资源

回复 11楼 sam.to 的帖子

本帖子中包含更多资源

回复 13楼 sam.to 的帖子

本帖子中包含更多资源

回复 16楼 sam.to 的帖子