6x

Palkia

检测到威胁: HEUR:Trojan.Win32.Generic F:\测试样本\b63cdd95cb0b1a55d45402659e35aba5/PE-Armor  
检测到威胁: HEUR:Trojan.Win32.Generic F:\测试样本\b73c0ee934f99cbb6582eb5da5761c1c/PE-Armor  
检测到威胁: HEUR:Trojan.Win32.Generic F:\测试样本\b86b60ea93518ed74971535aef4730dc/PE-Armor

[ 本帖最后由 Palkia 于 2009-9-20 22:11 编辑 ]

尤金卡巴斯基

To KL

尤金卡巴斯基

Hello,


b26c224382826b99adec132b66c3442d - Trojan.Win32.Sasfis.ngh
b36e969dae673b508b0fbc1729a08f9e - Trojan.Win32.Sasfis.ngi
b44d9e74eef98ea9d9db23de6b1cd591 - Trojan.Win32.Sasfis.ngj
b63cdd95cb0b1a55d45402659e35aba5 - Trojan-Downloader.Win32.Obfuscated.upv
b73c0ee934f99cbb6582eb5da5761c1c - Trojan.Win32.Swizzor.akd
b86b60ea93518ed74971535aef4730dc - Trojan.Win32.Swizzor.ake

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.

sam.to

to ll,eset,antivir

https://www.virustotal.com/anali ... 00cde9a4-1253463576


http://samples.nod32.com.hk/inde ... 9f39b728deb0a159d46


檔案名：6x.zip

MD5值：3dbf1f3f3ed519f39b728deb0a159d46

當前狀態：正在處理

提交日期：2009-09-21 00:20:49

提交者：管理員或者匿名用戶



25455561          b26c224382826b99adec...2d          340 KB          UNDER ANALYSIS
25455562          b36e969dae673b508b0f...9e          252 KB          UNDER ANALYSIS
25455563          b44d9e74eef98ea9d9db...91          264 KB          UNDER ANALYSIS
25455564          b63cdd95cb0b1a55d454...a5          408 KB          UNDER ANALYSIS
25455565          b73c0ee934f99cbb6582...1c          276 KB          UNDER ANALYSIS
25455566          b86b60ea93518ed74971...dc          292 KB          UNDER ANALYSIS

[ 本帖最后由 sam.to 于 2009-9-21 00:22 编辑 ]

失落的手链

瑞星2010

Love=卡巴+费尔

sam.to

Filename         Result          b26c224382826b99adec...2d          MALWARE

The file 'b26c224382826b99adec132b66c3442d' has been determined to be 'MALWARE'. Our analysts named the threat TR/Sasfis.ngh. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.
Filename         Result          b36e969dae673b508b0f...9e          MALWARE

The file 'b36e969dae673b508b0fbc1729a08f9e' has been determined to be 'MALWARE'. Our analysts named the threat TR/Sasfis.ngi. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.
Filename         Result          b44d9e74eef98ea9d9db...91          MALWARE

The file 'b44d9e74eef98ea9d9db23de6b1cd591' has been determined to be 'MALWARE'. Our analysts named the threat TR/Sasfis.ngj. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.
Filename         Result          b63cdd95cb0b1a55d454...a5          MALWARE

The file 'b63cdd95cb0b1a55d45402659e35aba5' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Obfuscated.upv. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.
Filename         Result          b73c0ee934f99cbb6582...1c          MALWARE

The file 'b73c0ee934f99cbb6582eb5da5761c1c' has been determined to be 'MALWARE'. Our analysts named the threat TR/Swizzor.akd. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.
Filename         Result          b86b60ea93518ed74971...dc          MALWARE

The file 'b86b60ea93518ed74971535aef4730dc' has been determined to be 'MALWARE'. Our analysts named the threat TR/Swizzor.ake. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.14.