无聊的人给红伞增加病毒库

显示全部楼层 · 发表于 2007-4-8 04:43:38

File:	bmw3[1].rar
Status:	INFECTED/MALWARE
MD5	f278815a75c4970aadf6a5ff429e8820
Packers detected:	-

Scanner results
Scan taken on 07 Apr 2007 20:37:41 (GMT)
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found CVE-2007-0038
AVG Antivirus	Found nothing
BitDefender	Found Exploit.Win32.MS05-002.Gen
ClamAV	Found Exploit.CVE_2007_0038-2
Dr.Web	Found Exploit.ANIFile
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found a variant of Win32/TrojanDownloader.Ani.Gen
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Exploit.Signature (probable variant)

显示全部楼层 · 发表于 2007-4-8 05:30:47

应该是ani变种,可是代码中找不到病毒地址,太奇怪了.

显示全部楼层 · 发表于 2007-4-8 05:34:35

就是不告诉LS的地址。。。。哈哈

显示全部楼层 · 发表于 2007-4-8 05:41:44

我已经上报卡巴了,不知道会是什么结果.

显示全部楼层 · 发表于 2007-4-8 07:13:33

才一个,太少了,一般我给nod都是几十个几十个的..

Thank you for your submission. Below you can see the current status of the uploaded files.

--------------------------------------------------------------------------------

We received the following archive files:

File ID  Filename  Size (Byte) Result
252358  bmw3[1].rar 572 OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
252359  bmw3[1].pig  783  UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename Result
bmw3[1].pig  UNDER ANALYSIS

The file 'bmw3[1].pig' has been determined to be 'UNDER ANALYSIS'.

--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2007-4-8 07:44:33

上报的话,NOD用户可就忙了.报了理不理你还得二说

显示全部楼层 · 发表于 2007-4-8 07:52:59

做红伞免杀也很简单。。。。算了。。。就不说了。。。省得让人给上报去。。。

显示全部楼层 · 发表于 2007-4-8 08:19:28

原帖由 EQ2 于 2007-4-7 15:52 发表
做红伞免杀也很简单。。。。算了。。。就不说了。。。省得让人给上报去。。。

那你就多发吧。。
我们都不用专门针对nod就可以免杀无数，过kav的50%就能过nod
你要真能做雨伞免杀，今天发10个，我什么也不说，我生气发nod免杀的时候都是20个20个扔的

显示全部楼层 · 发表于 2007-4-8 08:21:44

扫描系统区域...
扫描所选择的目录和文件...
对象: bmw3[1].pig
在压缩档案里: F:\病毒\1\bmw3[1].rar
Status: 已发现病毒
病毒: Exploit.Win32.MS05-002.Gen (BD 引擎)
对象: bmw3[1].rar
路径: F:\病毒\1
Status: 已发现病毒
病毒: Exploit.Win32.MS05-002.Gen (BD 引擎)
扫描完成: 2007-4-8 8:21
已检查 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2007-4-8 08:37:44

我已经上报卡巴了.......

[病毒样本] 无聊的人给红伞增加病毒库

本帖子中包含更多资源