一个NOD至今都不报的样本。

bluenice

此样本是我2个星期前上报给NOD的，今天了NOD还是不报。
很多杀软都报已知了。
看来NOD的样本上报处理还待加强啊！！！

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\csrsss(.rar'
C:\Documents and Settings\Administrator\My Documents\
  csrsss(.rar
    [0] Archive type: RAR
    --> csrsss(\csrss\csrss.vbs
    --> csrsss(\csrss\csrss.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

yinxuchina

kv 费尔都报了

jlennon

貌似NOD不理睬上报滴
======================================================
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-3
Start time: 2007-3-5 5:39
Engine(s): KAV engine (AVK 17.3071), BD-Engine (BD 17.2253)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: csrsss(/csrss csrss.exe
In archive: C:\Documents and Settings\Administrator\桌面\csrsss(.rar
Status: Virus detected
Virus: Trojan-Downloader.Win32.Delf.bau (KAV engine)
Object: csrsss(\csrss\csrss.exe
In archive: C:\Documents and Settings\Administrator\桌面\csrsss(.rar
Status: Virus detected
Virus: Trojan.Downloader.Delf.ACG (BD-Engine)
Object: csrsss(.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.Delf.bau (KAV engine), Trojan.Downloader.Delf.ACG (BD-Engine)
Analysis complete: 2007-3-5 5:39
    1 files checked
    1 infected files detected
    0 suspected files detected

The EQs

LZ上报的邮箱？？现在发现上报给官方比中国代理更加有用了。。上次上报的鸽子不久後就可以查杀了。。。

hsjj2005

微点报了一个活的
木马名称:Trojan-Downloader.Win32.Agent.ekg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEX3\CSRSSS(\CSRSS\CSRSS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

hsjj2005

费尔报

conan2003

AVG报

鱼是一只我

驱逐舰报Trojan.Downloader.18307

bridgewr

微点报杀