Worm.Downloader（第314次更新）

显示全部楼层 · 发表于 2010-1-3 19:58:10

#172-173
f-secure left 1, to

结果: 找到 1 恶意软件
Generic.Malware.PTkg.1B5584DF (病毒)
D:\Backup\Desktop\vir\2C398DC705A9B0FF3F5A618DFD8899D8.exe 操作：已隔离

显示全部楼层 · 发表于 2010-1-3 20:01:19

NOD miss，avira kill，a2 kill，已上报ESET

C:\Users\round\Desktop\172-173.rar/5237AA467794B49E81E149E0EDBD7785.exe 已检测: Trojan-Downloader.Win32.Geral!IK
C:\Users\round\Desktop\172-173.rar/2C398DC705A9B0FF3F5A618DFD8899D8.exe 已检测: Trojan-Downloader.Win32.Geral!IK

显示全部楼层 · 发表于 2010-1-3 22:46:26

172-173 Miss,To KL

显示全部楼层 · 发表于 2010-1-3 22:54:45

172-173

2C398DC705A9B0FF3F5A618DFD8899D8.exe - Trojan-Downloader.Win32.Geral.ngw
5237AA467794B49E81E149E0EDBD7785.exe - Trojan-Dropper.Win32.Agent.bkgk

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2010-1-6 18:58:24

Update

显示全部楼层 · 发表于 2010-1-6 19:00:17

#174-175
microsoft：TrojanDownloader:Win32/Dogkild.S

显示全部楼层 · 发表于 2010-1-6 19:03:31

本帖最后由 fatezero 于 2010-1-7 06:05 编辑

174-175

Hello,

567BA34016BCE024B806149E5472D802.exe - Trojan-Downloader.Win32.Geral.nho
7CCDF82C81992645AD65D9B25226D04F.exe - Trojan-Downloader.Win32.Geral.nhp

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2010-1-7 14:08:08

VirSCAN.org Scanned Report :
Scanned time : 2010/01/07 14:04:53 (CST)
Scanner results: 76%的杀软(28/37)报告发现病毒
File Name    : 174-175.rar
File Size    : 52439 byte
File Type    : RAR archive data, v1d, os
MD5          : a343d0e1e14245b6a7795c0a0efa8c28
SHA1          : dd80df8166595dc4d1dc358a322aca2a084b1d3d
Online report  : http://virscan.org/report/69ea7073448986316b423be4017db661.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    4.5.0.8       20100107030150 2010-01-07  4.30 Backdoor.Win32.Popwin!IK
安博士V3    2010.01.07.01 2010.01.07       2010-01-07  1.05 Packed/Upack
AntiVir       8.2.1.130    7.10.2.127       2010-01-06  0.29 TR/Crypt.ZPACK.Gen
安天          2.0.18       20100105.3569237  2010-01-05  0.17 -
Arcavir       2009          201001061546    2010-01-06  0.09 Heur.RoundKick
Authentium    5.1.1          201001070338    2010-01-07  1.26 W32/LdPinch.N.gen!Eldorado (Possible)
AVAST!       4.7.4          100106-1       2010-01-06  0.03 Win32:Perkesh [Rtk]
AVG          8.5.288       270.14.128/2604 2010-01-07  1.68 Worm/Generic.ASQV
BitDefender 7.81008.4833295 7.29762          2010-01-07  4.12 Generic.Malware.PTkg.4CD0C161
CA (VET)    35.1.0       7218             2010-01-05  5.35 -
ClamAV       0.95.2       10265          2010-01-07  0.00 PUA.Packed.Upack39
Comodo       3.13.579       3409             2010-01-06  1.01 Heur.Packed.Unknown
CP Secure    1.3.0.5       2010.01.07       2010-01-07  0.13 -
Dr.Web       4.44.0.9170    2010.01.07       2010-01-07  8.55 -
F-Prot       4.4.4.56       20100106       2010-01-06  1.25 W32/LdPinch.N.gen!Eldorado (generic, not disinfectable)
F-Secure    7.02.73807    2010.01.07.05    2010-01-07  1.23 Trojan-Downloader.Win32.Geral.nho [AVP]
飞塔          11.345-       11.345          2010-01-06  0.46 W32/RootKit.GR!tr
GData       19.9804/19.661  20100107       2010-01-07  7.45 Trojan-Downloader.Win32.Geral.nho [Engine:A]
ViRobot       20100106       2010.01.06       2010-01-06  0.43 -
Ikarus       T3.1.01.79    2010.01.07.74904  2010-01-07  4.18 Backdoor.Win32.Popwin
江民杀毒    13.0.900       2010.01.02       2010-01-02  4.92 -
卡巴斯基    5.5.10       2010.01.07       2010-01-07  0.24 Trojan-Downloader.Win32.Geral.nho
金山毒霸    2009.2.5.15    2010.1.7.10    2010-01-07  0.56 -
迈克菲       5.3.00       5853             2010-01-06  3.43 -
Microsoft    1.5302       2010.01.06       2010-01-06  12.55  TrojanDownloader:Win32/Dogkild.S
Norman       6.01.09       6.01.00          2010-01-06  4.01 W32/Packed_Upack.A
熊猫卫士    9.05.01       2010.01.06       2010-01-06  5.60 Suspicious file
趋势科技    9.000-1003    6.749.00       2010-01-06  0.60 Cryp_Xed-12
Quick Heal    10.00          2010.01.05       2010-01-05  1.91 Suspicious - DNAScan
瑞星          20.0          22.29.03.03    2010-01-07  0.46 Trojan.Win32.Nodef.yay
Sophos       3.03.0       4.49             2010-01-07  3.25 Troj/RootKit-GR
Sunbelt       3.9.2388.2    5604             2010-01-06  5.26 Trojan.Win32.Packer.Upack0.3.9 (v)
赛门铁克    1.3.0.24       20100102.020    2010-01-02  0.60 Suspicious.Bifrose
nProtect    20100105.03    6794546          2010-01-05  7.01 -
The Hacker    6.5.0.3       v00137          2010-01-07  1.09 W32/Behav-Heuristic-060
VBA32       3.12.12.1    20100106.1141    2010-01-06  8.99 Win32.Trojan.Downloader (http://...) (suspicious)
VirusBuster 4.5.11.10    10.118.23/2027701 2010-01-07  3.48 Packed/Upack

显示全部楼层 · 发表于 2010-1-14 19:03:55

Update

显示全部楼层 · 发表于 2010-1-14 19:09:49

176

to kl

E:\download\176.rar
[0] Archive type: RAR
--> 076B4027D9B3263EC703CDA77C22CCEC.exe
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan

[病毒样本] Worm.Downloader（第314次更新）