1x木马的dll主程序

显示全部楼层 · 发表于 2009-9-24 13:17:26

感觉像是暗组的DARKST木马~~~
VIRUSTOTAL报告：

文件 dpa.rar 接收于 2009.09.24 05:13:00 (UTC)

结果: 20/41 (48.79%)


a-squared	4.5.0.24	2009.09.24	-
AhnLab-V3	5.0.0.2	2009.09.24	-
AntiVir	7.9.1.23	2009.09.23	TR/Spy.Gen
Antiy-AVL	2.0.3.7	2009.09.24	-
Authentium	5.1.2.4	2009.09.24	W32/OnlineGames.BX.gen!Eldorado
Avast	4.8.1351.0	2009.09.23	Win32:Dialer-gen
AVG	8.5.0.412	2009.09.23	Agent.BCPH
BitDefender	7.2	2009.09.24	Gen:Trojan.Heur.eu8@dpQcYMhb
CAT-QuickHeal	10.00	2009.09.23	Trojan.Agent.ATV
ClamAV	0.94.1	2009.09.24	-
Comodo	2421	2009.09.24	-
DrWeb	5.0.0.12182	2009.09.24	-
eSafe	7.0.17.0	2009.09.23	-
eTrust-Vet	31.6.6757	2009.09.23	-
F-Prot	4.5.1.85	2009.09.23	W32/OnlineGames.BX.gen!Eldorado
F-Secure	8.0.14470.0	2009.09.24	-
Fortinet	3.120.0.0	2009.09.24	PossibleThreat
GData	19	2009.09.24	Gen:Trojan.Heur.eu8@dpQcYMhb
Ikarus	T3.1.1.72.0	2009.09.24	Backdoor.Win32.Inject
Jiangmin	11.0.800	2009.09.23	Heur:Backdoor/Huigezi
K7AntiVirus	7.10.852	2009.09.23	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.09.24	-
McAfee	5750	2009.09.23	Generic.dx!cny
McAfee+Artemis	5750	2009.09.23	Generic.dx!cny
McAfee-GW-Edition	6.8.5	2009.09.24	Trojan.Spy.Gen
Microsoft	1.5005	2009.09.23	-
NOD32	4452	2009.09.24	a variant of Win32/Fusing.AA
Norman	6.01.09	2009.09.23	-
nProtect	2009.1.8.0	2009.09.23	-
Panda	10.0.2.2	2009.09.23	Trj/CI.A
PCTools	4.4.2.0	2009.09.23	-
Prevx	3.0	2009.09.24	Medium Risk Malware
Rising	21.48.31.00	2009.09.24	-
Sophos	4.45.0	2009.09.24	Mal/Behav-170
Sunbelt	3.2.1858.2	2009.09.24	-
Symantec	1.4.4.12	2009.09.24	Adware.VirtuMonde
TheHacker	6.5.0.2.016	2009.09.24	-
TrendMicro	8.950.0.1094	2009.09.24	-
VBA32	3.12.10.10	2009.09.23	-
ViRobot	2009.9.24.1951	2009.09.24	-
VirusBuster	4.6.5.0	2009.09.23	-

显示全部楼层 · 发表于 2009-9-24 17:12:41

To KL

显示全部楼层 · 发表于 2009-9-24 22:11:33

McAfee kill

显示全部楼层 · 发表于 2009-9-25 19:22:41

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
Backdoor.Win32.Inject.cjp

显示全部楼层 · 发表于 2009-9-26 08:08:33

Gen:Trojan.Heur.eu8@dpQcYMhb BD KL

显示全部楼层 · 发表于 2009-9-26 08:42:33

还没下就干了

显示全部楼层 · 发表于 2009-9-26 08:47:01

BD的启发真牛x，还那么长一串

显示全部楼层 · 发表于 2009-9-26 08:49:01

Avira AntiVir
dpa.rar
  [0] Archive type: RAR
--> dpa.dll
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4addedc1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-9-26 10:29:36

RIS 2010
Trojan.Win32.Generic.11EDA95D

[病毒样本] 1x木马的dll主程序

本帖子中包含更多资源