真毒！全盘感染最新病毒 restorer32_a + userinit.exe 卡巴、360杀毒全部查不出

显示全部楼层 · 发表于 2009-10-6 17:15:36

原帖由 江湖的fans 于 2009-10-6 12:07 发表
TO RISING

上传了,如果检测成安全文件,怎么办?

显示全部楼层 · 发表于 2009-10-6 17:31:02

正常文件和被感染的样本.rar 是空的

显示全部楼层 · 发表于 2009-10-6 19:04:04

2009/10/6 19:01:46 已清除木马程序 Trojan-Downloader.Win32.Mutant.fmp G:\Temp\Virus\360卡巴全查不出的病毒.rar/360卡巴全查不出的病毒\restorer32_a.exe

显示全部楼层 · 发表于 2009-10-6 21:06:31

毛豆 avst 木有反应~~~~

显示全部楼层 · 发表于 2009-10-6 21:10:22

此样本看不出感染行为。

显示全部楼层 · 发表于 2009-10-6 21:15:16

nod32和小红伞都过了

显示全部楼层 · 发表于 2009-10-6 21:20:54

Panda Cloud Antivirus

显示全部楼层 · 发表于 2009-10-6 21:21:47

2009-10-06 21:20:59 运行应用程序操作:阻止
进程路径:E:\virus\360卡巴全查不出的病毒\restorer32_a.exe
文件路径:C:\WINDOWS\system32\svchost.exe
触发规则:所有程序规则->AD:01…禁止注入进程规则->%windir%\system32\svchost.exe

显示全部楼层 · 发表于 2009-10-6 21:22:03

WKS6.0.4.1212报了

显示全部楼层 · 发表于 2009-10-6 21:25:24

File ID 燜ilename Size (Byte) Result
25466770  360?????????.rar...??.rar 34.83 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
25466771  restorer32_a.exe  26.3 KB  MALWARE
25466772  userinit.exe  56.5 KB  DAMAGED FILE (MALWARE)

Please find a detailed report concerning each individual sample below:

燜ilename Result
restorer32_a.exe  MALWARE

The file 'restorer32_a.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.fdi. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

燜ilename Result
userinit.exe  DAMAGED FILE (MALWARE)

The file 'userinit.exe' has been determined to be 'DAMAGED FILE (MALWARE)'. In particular this means that this file is damaged and not working properly. Nevertheless we were able to determine that it contains malicious code fragments.

[病毒样本] 真毒！全盘感染最新病毒 restorer32_a + userinit.exe 卡巴、360杀毒全部查不出

本帖子中包含更多资源