4(45 楼有新)

显示全部楼层 · 发表于 2009-9-26 18:05:49

4abc34b266beed44f06cad2df9c3c694  fff.swf2
4e6e18d3569e77fe5c067a13edee10a0  iie.swf2
0725eab91dbc507696df0bd3b65a43c7  2.css2
87996aba2a43ba55ed6ea692e298d6f2  x.js_

TO KL,LL,mcafee

Hello,

2.css2 - Trojan-Downloader.JS.Small.ok,

fff.swf2 - Trojan-Downloader.SWF.Small.fh,

x.js_ - Trojan-Downloader.JS.Iframe.bup

These files are already detected. Please update your antivirus bases.

iie.swf2

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

[ 本帖最后由 sam.to 于 2009-10-8 21:34 编辑 ]

显示全部楼层 · 发表于 2009-9-26 18:12:28

avast 杀

显示全部楼层 · 发表于 2009-9-26 18:22:02

杀什么?杀多少个?

显示全部楼层 · 发表于 2009-9-26 18:27:00

Multi Command-Line Scanner 报告
-------------------------------------------------------------------------
D:\TDDownload\987654323\2.css2
MD5 Hash: 0725EAB91DBC507696DF0BD3B65A43C7

A-squared ----- Exploit.JS.Mult!IK
AntiVir V7 ----- HTML/Rce.Gen
BitDefender -----Nothing
ClamWin -----Nothing
Dr.Web V5 -----Nothing
F-Prot ----- HTML/BoF.J
Mcafee -----Nothing
Panda -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 3/10 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\987654323\fff.swf2
MD5 Hash: 4ABC34B266BEED44F06CAD2DF9C3C694

A-squared ----- Trojan-Downloader.Win32.Swif!IK
AntiVir V7 -----Nothing
BitDefender -----Nothing
ClamWin -----Nothing
Dr.Web V5 -----Nothing
F-Prot -----Nothing
Mcafee -----Nothing
Panda -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/10 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\987654323\iie.swf2
MD5 Hash: 4E6E18D3569E77FE5C067A13EDEE10A0

A-squared ----- Trojan-Downloader.Win32.Swif!IK
AntiVir V7 -----Nothing
BitDefender -----Nothing
ClamWin -----Nothing
Dr.Web V5 -----Nothing
F-Prot -----Nothing
Mcafee -----Nothing
Panda -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/10 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\987654323\x.js_
MD5 Hash: 87996ABA2A43BA55ED6EA692E298D6F2

A-squared -----Nothing
AntiVir V7 ----- HEUR/HTML.Malware
BitDefender -----Nothing
ClamWin -----Nothing
Dr.Web V5 -----Nothing
F-Prot -----Nothing
Mcafee -----Nothing
Panda -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/10 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------

任务完成 @ 2009-09-26 星期六 18:26:50.26
注意: 结果可能与GUI版本不同。

显示全部楼层 · 发表于 2009-9-26 18:36:15

檔案 987654323.rar 接收於 2009.09.26 10:34:33 (UTC)
反病毒引擎版本最後更新掃瞄結果
a-squared 4.5.0.24 2009.09.26 -
AhnLab-V3 5.0.0.2 2009.09.26 -
AntiVir 7.9.1.25 2009.09.25 HTML/Silly.Gen
Antiy-AVL 2.0.3.7 2009.09.25 -
Authentium 5.1.2.4 2009.09.25 HTML/BoF.J
Avast 4.8.1351.0 2009.09.26 SWF:Downloader-P
AVG 8.5.0.412 2009.09.26 JS/Downloader.Agent
BitDefender 7.2 2009.09.26 -
CAT-QuickHeal 10.00 2009.09.26 -
ClamAV 0.94.1 2009.09.26 -
Comodo 2443 2009.09.26 -
DrWeb 5.0.0.12182 2009.09.26 -
eSafe 7.0.17.0 2009.09.24 -
eTrust-Vet 31.6.6761 2009.09.25 -
F-Prot 4.5.1.85 2009.09.25 HTML/BoF.J
F-Secure 8.0.14470.0 2009.09.26 -
Fortinet 3.120.0.0 2009.09.26 -
GData 19 2009.09.26 SWF:Downloader-P
Ikarus T3.1.1.72.0 2009.09.26 Trojan-Downloader.Win32.Swif
Jiangmin 11.0.800 2009.09.26 -
K7AntiVirus 7.10.855 2009.09.26 -
Kaspersky 7.0.0.125 2009.09.26 -
McAfee 5752 2009.09.25 -
McAfee+Artemis 5752 2009.09.25 -
McAfee-GW-Edition 6.8.5 2009.09.26 Script.Silly.Gen
Microsoft 1.5005 2009.09.23 TrojanDownloader:Win32/Swif.AC
NOD32 4458 2009.09.25 -
Norman 6.01.09 2009.09.25 HTML/IFrameBof.A
nProtect 2009.1.8.0 2009.09.26 -
Panda 10.0.2.2 2009.09.25 -
PCTools 4.4.2.0 2009.09.25 -
Prevx 3.0 2009.09.26 -
Rising 21.48.52.00 2009.09.26 -
Sophos 4.45.0 2009.09.26 -
Sunbelt 3.2.1858.2 2009.09.26 -
Symantec 1.4.4.12 2009.09.26 -
TheHacker 6.5.0.2.019 2009.09.26 -
TrendMicro 8.950.0.1094 2009.09.25 -
VBA32 3.12.10.11 2009.09.25 -
ViRobot 2009.9.26.1958 2009.09.26 -
VirusBuster 4.6.5.0 2009.09.25 JS.BOFExploit.Gen

显示全部楼层 · 发表于 2009-9-26 18:52:33

ESET NOD32 MISS...
TO ESET

avast!又放冷枪..汗...

显示全部楼层 · 发表于 2009-9-26 18:59:23

过卡巴6.0和大蜘蛛

显示全部楼层 · 发表于 2009-9-26 22:18:20

to McAfee

显示全部楼层 · 发表于 2009-9-26 23:28:32

我已上报了

显示全部楼层 · 发表于 2009-9-27 11:53:22

55a3864245418562677a6749676be1e4 av1.swf2
4e6e18d3569e77fe5c067a13edee10a0 iie.swf2
4abc34b266beed44f06cad2df9c3c694 fff.swf2
0725eab91dbc507696df0bd3b65a43c7 2.css2
47b65e9808fe28582d380f74c7dcb3b6 ddd.ex2e
cee1d03f7cd43062bd131cc1a85279d2 dd.exe3
ec57b27c363617c61608ef96bfaec693 x.js2
37bb3c920d114cffe5721b0cf0086f2c av3.sw2f
d855a60a464a05ceaa8adfb1e38d3a1a av2.swf2
TO KL,LL,mcafee

2.css2 - Trojan-Downloader.JS.Small.ok,

av1.swff - Trojan.JS.Agent.apm,

av2.swff - Exploit.JS.DirektShow.an,

dd.exef - Worm.Win32.AutoRun.axcm,

fff.swff - Trojan-Downloader.SWF.Small.fh,

x.js2 - Trojan-Clicker.JS.Small.z

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

av3.sw2f,
ddd.ex2e,
iie.swff

No malicious code were found in these files.

Please quote all when answering

[ 本帖最后由 sam.to 于 2009-9-27 13:52 编辑 ]

[病毒样本] 4(45 楼有新)

本帖子中包含更多资源

回复 2楼 ghx1981213 的帖子

回复 8楼 BING126 的帖子

本帖子中包含更多资源