查看: 9500|回复: 45
收起左侧

[病毒样本] 病毒6个,卡巴全挂,红伞全杀

[复制链接]
某人的马甲
发表于 2007-2-26 15:36:57 | 显示全部楼层 |阅读模式
卡巴树大招风,彻底无语....

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
mofunzone
发表于 2007-2-26 15:49:11 | 显示全部楼层
雨伞全是启发,等看nod结果
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\upxdnd.rar'
C:\Documents and Settings\Administrator\My Documents\
  upxdnd.rar
    [0] Archive type: RAR
    --> upxdnd.dll
    --> 02.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 03.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 04.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 05.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> aq4w.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> image2.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 01.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
mofunzone
发表于 2007-2-26 15:51:35 | 显示全部楼层
漏掉的那个upxdnd.dll上报了。。
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
211348         upxdnd.dll         7.168         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
upxdnd.dll         UNDER ANALYSIS


The file 'upxdnd.dll' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.
kp2006
头像被屏蔽
发表于 2007-2-26 15:59:11 | 显示全部楼层
瑞星2个

金山3个

报的都不一样
pamier2001
发表于 2007-2-26 16:01:18 | 显示全部楼层
upxdnd.dll - a variant of Win32/PSW.Agent.NCC trojan
02.exe - a variant of Win32/PSW.Agent.NCC trojan
03.exe - probably a variant of Win32/PSW.Agent.NCC trojan
04.exe - probably a variant of Win32/PSW.Agent.NCC trojan
05.exe - Win32/Delf.NDG trojan
aq4w.dll - probably a variant of Win32/PSW.Agent.NAW trojan
image2.exe - a variant of Win32/Agent.AIR trojan
nod32来了

[ 本帖最后由 pamier2001 于 2007-2-26 16:02 编辑 ]
小邪邪
发表于 2007-2-26 16:02:22 | 显示全部楼层
咖啡8.5只杀了一个05.exe,其它不报
hsjj2005
发表于 2007-2-26 16:22:55 | 显示全部楼层
费尔右键扫描3个,动态防御未试。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
yt5567
发表于 2007-2-26 16:37:49 | 显示全部楼层
蜘蛛3个
jlennon
头像被屏蔽
发表于 2007-2-26 16:45:47 | 显示全部楼层
卡巴没有挂,表乱说话。
=======================================
Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 1/5/2007
Start time: 2/26/2007 16:44
Engine(s): Engine A (AVK 17.1835), Engine B (BD 17.1375)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: 03.exe
In archive: C:\Documents and Settings\Administrator\桌面\upxdnd.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.es (Engine A)
Object: upxdnd.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.es (Engine A)
Analysis complete: 2/26/2007 16:44
    1 files checked
    1 infected files detected
    0 suspected files detected

[ 本帖最后由 jlennon 于 2007-2-26 16:47 编辑 ]
tun
发表于 2007-2-26 16:59:24 | 显示全部楼层
8 文件?
VET 30.4.3434

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-10 15:16 , Processed in 0.148341 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表