來自外挂(16 楼有新)

sam.to

3af51d8ce81fcc48e0378cbb9a49ff77  bh1.0.exe2
70360f2735fd3dafb472dd10978298f0  maomao2.3.exe2
695405640ff0a750c5b68266376d54c9  my3.4.exe2
6144ab6e57948b275d7c399a69e833a3  she3.8.exe2
937b12b62495449ee409a0bd47090162  xx3.0.exe2

https://www.virustotal.com/anali ... c1bec044-1256378097

http://sample.nod32.com.hk/index ... dfded96a29d459e435e

卡巴报heur


to kl,ll,mcafee,eset,comodo



bh1.0.exe2 - Trojan-Dropper.Win32.Agent.bglf,
maomao2.3.exe2 - Trojan-Dropper.Win32.Agent.bgkv,
my3.4.exe2 - Trojan-Dropper.Win32.Agent.bgkw,
she3.8.exe2 - Trojan-Dropper.Win32.Agent.bgla,
xx3.0.exe2 - Trojan-Dropper.Win32.Agent.bgkz

[ 本帖最后由 sam.to 于 2009-11-1 12:31 编辑 ]

悠柚

Multi Command-Line Scanner 报告
-------------------------------------------------------------------------
D:\TDDownload\5\bh1.0.exe2
MD5 Hash: 3AF51D8CE81FCC48E0378CBB9A49FF77

A-squared ----- Trojan-Downloader.Win32.VB!IK
BitDefender -----Nothing
F-Prot -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/5 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\5\maomao2.3.exe2
MD5 Hash: 70360F2735FD3DAFB472DD10978298F0

A-squared ----- Riskware.Win32.VB!IK
BitDefender -----Nothing
F-Prot -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/5 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\5\my3.4.exe2
MD5 Hash: 695405640FF0A750C5B68266376D54C9

A-squared ----- Trojan.Crypt!IK
BitDefender -----Nothing
F-Prot -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/5 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\5\she3.8.exe2
MD5 Hash: 6144AB6E57948B275D7C399A69E833A3

A-squared ----- Trojan-Downloader.Win32.VB!IK
BitDefender -----Nothing
F-Prot -----Nothing
Sophos -----Nothing
VBA32 -----Nothing

*** 1/5 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------
D:\TDDownload\5\xx3.0.exe2
MD5 Hash: 937B12B62495449EE409A0BD47090162

A-squared ----- Trojan-Downloader.Win32.VB!IK
BitDefender -----Nothing
F-Prot -----Nothing
Sophos ----- Mal/EncPk-CR
VBA32 -----Nothing

*** 2/5 杀毒引擎在文件中发现病毒 ***
-------------------------------------------------------------------------

任务完成 @ 2009-10-24 星期六 18:03:45.12
注意: 结果可能与GUI版本不同。

62590423

2 to 费尔

kingmuro

病毒名称        文件名
Trojan.Win32.Generic.11EEE3DF        D:\MY DOCUMENTS\桌面\TEST\5\5\MAOMAO2.3.EXE2>>65

失落的手链

有二个没报

helokii8

IK 杀得它妈妈爸爸都不知道在哪里 。。。

helokii8

日期和时间：  2009-10-25 9:30:01
文件名：  5.part3[1].rar
原始路径：  c:\Documents and Settings\huchao\Local Settings\Temporary Internet Files\Content.IE5\98E24JJ8\
文件大小：  1819.76 KB
病毒名称：  Trojan-Downloader.Win32.VB
建议：  删除
编号：  882362

rasis

benq80282

Avira AntiVir
5.part1..rar
  [0] Archive type: RAR
    --> 5\bh1.0.exe2
      [1] Archive type: RSRC
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4b04373b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
5.part2.rar
  [0] Archive type: RAR
    --> 5\my3.4.exe2
      [1] Archive type: RSRC
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4a62ee8c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
5.part3.rar
  [0] Archive type: RAR
    --> 5\xx3.0.exe2
      [1] Archive type: RSRC
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4b04373c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

尤金卡巴斯基

bh1.0.exef - Trojan-Dropper.Win32.Agent.bglf,

maomao2.3.exef - Trojan-Dropper.Win32.Agent.bgkv,

my3.4.exef - Trojan-Dropper.Win32.Agent.bgkw,

she3.8.exef - Trojan-Dropper.Win32.Agent.bgla,

xx3.0.exef - Trojan-Dropper.Win32.Agent.bgkz

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.