感染型病毒样本+生成物+被感染文件。

显示全部楼层 · 发表于 2009-9-15 18:22:39

我To SSR

显示全部楼层 · 发表于 2009-9-15 18:31:43

我要吐

filename:  C:\Downloads\eveAutoruns\1.zip
machine: Machine
result: See the developer notes

filename: Autoruns.exe
machine: Machine
result: See the developer notes

filename: RCX1.tmp
machine: Machine
result: See the developer notes

filename: eveNIS09CS-16.5.134.exe
machine: Machine
result: See the developer notes

filename: winlog.EXE
machine: Machine
result: See the developer notes

filename: eveAutoruns.exe
machine: Machine
result: See the developer notes

filename: RCX2.tmp
machine: Machine
result: See the developer notes

Developer notes:
C:\Downloads\eveAutoruns\1.zip is a container file of type  ZIP
Autoruns.exe Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip
RCX1.tmp Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip
eveNIS09CS-16.5.134.exe Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip
winlog.EXE Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip
eveAutoruns.exe Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip
RCX2.tmp Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by C:\Downloads\eveAutoruns\1.zip                                                                               SSR的自动分析能力真不是盖的

显示全部楼层 · 发表于 2009-9-15 20:30:16

当感染文件的时候瑞星2010木马行为防御报警

显示全部楼层 · 发表于 2009-9-15 22:25:42

2009/9/15 22:24:46 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\winlog.rar/winlog.EXE
2009/9/15 22:24:47 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\Autoruns.rar/Autoruns.exe
2009/9/15 22:24:49 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\eveAutoruns.rar/eveAutoruns.exe
2009/9/15 22:24:49 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\eveAutoruns.rar/eveNIS09CS-16.5.134.exe
2009/9/15 22:24:49 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\eveAutoruns.rar/RCX1.tmp
2009/9/15 22:24:49 已清除病毒 Worm.Win32.VB.abv G:\Temp\Virus\eveAutoruns.rar/RCX2.tmp

显示全部楼层 · 发表于 2009-9-15 22:36:33

McAfee 启发式报毒。。

显示全部楼层 · 发表于 2009-9-15 23:15:09

瑞星有杀掉了

显示全部楼层 · 发表于 2009-9-15 23:22:26

没啥技术含量的感染。
提取附加数据，就是感染前的东西了。

[病毒样本] 感染型病毒样本+生成物+被感染文件。

本帖子中包含更多资源