楼主: sam.to
收起左侧

[病毒样本] 过主流2 (天天更新) (此帖完,1024楼有新帖子地址)

  [复制链接]
sam.to
 楼主| 发表于 2010-9-20 20:08:01 | 显示全部楼层
本帖最后由 sam.to 于 2010.9.23 01:03 编辑

e80e49d92a77d42fd0ce48ef0721af3d  Acoustica.Mixcraft.5.1.Crack.40063.exe1
cc18b958c9160d30c4ae8477587a8ff7  Acoustica.Mixcraft.5.1.Keygen.40063.exe1
855a69b26a36d78b049da1dff6b4cc2f  Aloaha.PDF.Suite.Pro.3.9.297.Crack.40063.exe1
65985aa436222df2b8675d266b176f4f  Aloaha.PDF.Suite.Pro.3.9.297.Keygen.40063.exe1
aae963f029a9c9dc2f5874ece5350b97  Bigasoft.iPhone.Video.Converter.2.4.3.3904.Crack.40063.exe1
4efde45b9c1741a1bae4ade08c6a5ccd  Bigasoft.iPhone.Video.Converter.2.4.3.3904.Keygen.40063.exe1
255da79d1d3d1f97a7f0934264252317  FarStone.TotalDeploy.Server.1.0.Crack.40063.exe1
3d7fadac8b0045454734ff9d2ddfbd87  FarStone.TotalDeploy.Server.1.0.Keygen.40063.exe1
d4dd4ebd514d5a75afa0e78319cbebd2  SmartFTP.4.0.Crack.40063.exe1
718929c29aa816150fa2182b97aedef0  SmartFTP.4.0.Keygen.40063.exe1
c7942c3dadc7747c66ecf07e0fafcea1  TagRunner.2.1.6401.Crack.40063.exe1
59243a6bb8e20bbfebf802f148d3027b  TagRunner.2.1.6401.Keygen.40063.exe1


to kl,ll,mcafee,comodo,avira




File ID
Filename
Size (Byte)
Result
25889553
765735-211.rar
76.38 KB
OK
A listing of files contained inside archives alongside their results can be found below:
File ID
Filename
Size (Byte)
Result
25889554
Acoustica.Mixcra...63.exe1
110.5 KB
UNDER ANALYSIS
25889555
Acoustica.Mixcra...63.exe1
110.5 KB
UNDER ANALYSIS
25889556
Aloaha.PDF.Suite...63.exe1
110.5 KB
UNDER ANALYSIS
25889557
Aloaha.PDF.Suite...63.exe1
110.5 KB
UNDER ANALYSIS
25889558
Bigasoft.iPhone....63.exe1
110.5 KB
UNDER ANALYSIS
25889559
Bigasoft.iPhone....63.exe1
110.5 KB
UNDER ANALYSIS
25889560
FarStone.TotalDe...63.exe1
110.5 KB
UNDER ANALYSIS
25889561
FarStone.TotalDe...63.exe1
110.5 KB
UNDER ANALYSIS
25889562
SmartFTP.4.0.Cra...63.exe1
110.5 KB
UNDER ANALYSIS
25889563
SmartFTP.4.0.Key...63.exe1
110.5 KB
UNDER ANALYSIS
25889564
TagRunner.2.1.64...63.exe1
110.5 KB
UNDER ANALYSIS
25889565
TagRunner.2.1.64...63.exe1
110.5 KB
UNDER ANALYSIS




Trojan-Downloader.Win32.CodecPack.mps

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


-------------------------------------------
Regards, Ivan Kargapoltsev.
Virus analyst , Kaspersky Lab.



Please find a detailed report concerning each individual sample below:
Filename
Result
Acoustica.Mixcra...63.exe1
MALWARE

The file 'Acoustica.Mixcraft.5.1.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.azt.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename
Result
Acoustica.Mixcra...63.exe1
MALWARE

The file 'Acoustica.Mixcraft.5.1.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.BI.6.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename
Result
Aloaha.PDF.Suite...63.exe1
MALWARE

The file 'Aloaha.PDF.Suite.Pro.3.9.297.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.1.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
Aloaha.PDF.Suite...63.exe1
MALWARE

The file 'Aloaha.PDF.Suite.Pro.3.9.297.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.2.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
Bigasoft.iPhone....63.exe1
MALWARE

The file 'Bigasoft.iPhone.Video.Converter.2.4.3.3904.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.3.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
Bigasoft.iPhone....63.exe1
MALWARE

The file 'Bigasoft.iPhone.Video.Converter.2.4.3.3904.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.4.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
FarStone.TotalDe...63.exe1
MALWARE

The file 'FarStone.TotalDeploy.Server.1.0.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.5.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
FarStone.TotalDe...63.exe1
MALWARE

The file 'FarStone.TotalDeploy.Server.1.0.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.6.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
SmartFTP.4.0.Cra...63.exe1
MALWARE

The file 'SmartFTP.4.0.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.BI.7.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename
Result
SmartFTP.4.0.Key...63.exe1
MALWARE

The file 'SmartFTP.4.0.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.7.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
TagRunner.2.1.64...63.exe1
MALWARE

The file 'TagRunner.2.1.6401.Crack.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.8.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
Filename
Result
TagRunner.2.1.64...63.exe1
MALWARE

The file 'TagRunner.2.1.6401.Keygen.40063.exe1' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.CodecPack.MPS.9.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.11.247.
sam.to
 楼主| 发表于 2010-9-20 20:08:05 | 显示全部楼层
咖啡企业版压缩包测不出来?
frqblue 发表于 2010.9.20 14:40



你有沒有解出來?
瓜皮猫
发表于 2010-9-20 20:14:55 | 显示全部楼层
211L
eset kill 12
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Acoustica.Mixcraft.5.1.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Acoustica.Mixcraft.5.1.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Aloaha.PDF.Suite.Pro.3.9.297.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Aloaha.PDF.Suite.Pro.3.9.297.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Bigasoft.iPhone.Video.Converter.2.4.3.3904.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\Bigasoft.iPhone.Video.Converter.2.4.3.3904.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\FarStone.TotalDeploy.Server.1.0.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\FarStone.TotalDeploy.Server.1.0.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\SmartFTP.4.0.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\SmartFTP.4.0.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\TagRunner.2.1.6401.Crack.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种
C:\Users\Desktop\765735-211\2010-Sep-20-2002\TagRunner.2.1.6401.Keygen.40063.exe1 - Win32/Kryptik.GVK 特洛伊木马 的变种

评分

参与人数 1人气 +1 收起 理由
jayavira + 1 多谢测试

查看全部评分

Flashere
发表于 2010-9-20 20:23:07 | 显示全部楼层
俺用的是非主流杀毒软件,不知道能否查杀掉.
网名丢失
发表于 2010-9-20 20:47:40 | 显示全部楼层
211又全过了红伞了,还真是天天免杀啊。哎。
frqblue
发表于 2010-9-20 20:49:05 | 显示全部楼层
回复 212楼 sam.to  的帖子


    要密码
chz3
发表于 2010-9-20 22:37:16 | 显示全部楼层
又过红伞和小A ,不过毒霸清空。
chz3
发表于 2010-9-20 22:41:19 | 显示全部楼层
本帖最后由 chz3 于 2010.9.20 22:45 编辑

回复 215楼 网名丢失  的帖子
红伞树大招风 被免杀太正常了, 所以备几个辅杀还是很有用的。
前天安了ESET, 开高启全盘扫描 实在太慢了 , 后来卸载了。
网名丢失
发表于 2010-9-20 22:54:36 | 显示全部楼层
回复
红伞树大招风 被免杀太正常了, 所以备几个辅杀还是很有用的。
前天安了ESET, 开高启全盘扫描 实在 ...
chz3 发表于 2010.9.20 22:41

我打算准备弄个大蜘蛛来。还不够的话我还想弄个小A,不过开机启动只有红伞。其他的全部用作辅助杀毒。
sam.to
 楼主| 发表于 2010-9-20 23:09:49 | 显示全部楼层
不用上报mcafee,我每次都有上报
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-11-30 15:27 , Processed in 0.097389 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表