我为大家带来的是最新病毒..(小心不要运行)-(过全部杀毒软件)(加精)

zyson11

原帖由 ALEXBLAIR 于 2007-4-17 00:22 发表
这个分析工具是什么啊？？？

       Norman 的 沙盘功能。。。。呵呵

solcroft

原帖由 ALEXBLAIR 于 2007-4-17 01:59 发表
谢谢解答，这个沙盒是在线测试的还是单机程序的？？？？

是诺曼产品的功能之一，但也可以在线上传程序让它分析
http://www.norman.com/microsites/nsic/Submit/en-us

但老实说，诺曼沙盘失灵时不灵的，要是样本不超出它的威胁性底线水平它是不会报告的
有兴趣的话也可以看看PC Tools的Threat Expert（http://www.pctools.com/threat-expert/）和Sunbelt的CWSandbox（http://research.sunbelt-software.com/Submit.aspx）

ALEXBLAIR

十分感谢

zyson11

和solcroft 的解答！

[ 本帖最后由 ALEXBLAIR 于 2007-4-17 00:42 编辑 ]

蓝色牛仔裤

卡巴斯基怪兽级的反应速度...无语..   红伞刚升级的病毒库还不能报...

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-17
Start time: 2007-4-17 1:22
Engine(s): KAV engine (AVK 17.3590), BD-Engine (BD 17.2635)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: black-day.exe
        In archive: C:\Documents and Settings\Administrator\桌面\you will lost.rar
        Status: Virus detected
        Virus: Virus.Win32.Delf.bc (KAV engine), BehavesLike:Win32.FileInfector (BD-Engine)
Object: you will lost.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus, file deleted
        Virus: Virus.Win32.Delf.bc (KAV engine), BehavesLike:Win32.FileInfector (BD-Engine)
Analysis complete: 2007-4-17 1:22
    1 files checked
    1 infected files detected
    0 suspected files detected

[ 本帖最后由 蓝色牛仔裤 于 2007-4-17 01:25 编辑 ]

solcroft

原帖由 170912556 于 2007-4-16 23:53 发表
.....是最新型病毒,,过全部杀毒软件,,,包括你现在使用的...

Are you sure?

playx

铁克隔离...

http://www.symantec.com/security_response/writeup.jsp?docid=2007-041519-4515-99&tabid=3

[ 本帖最后由 playx 于 2007-4-17 02:42 编辑 ]

ALEXBLAIR

看来上报成功了
过一会应该会有回信了

KAV-Longhorn

红伞已经知道了，可是还没加入到病毒库

264722          you will lost.rar         71.962         OK

A listing of files contained inside archives alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
264723          black-day.exe          257.536          MALWARE


Please find a detailed report concerning each individual sample below:
Filename         Result
black-day.exe          MALWARE

The file 'black-day.exe' has been determined to be 'MALWARE'. Our analysts named the threat W32/Bday. The term "W32/" denotes a file virus or malware that runs on 32 Bit Windows systems (Windows 95 and higher) only.Detection will be added to our virus definition file (VDF) with one of the next updates.

170912556

刚回来,,,发现回复的人真多~~~

laylf

高......