[衍生物系列之3] 4个衍生物 过所有杀软

xpn282

在moonsilver 的帖子(http://bbs.kafan.cn/viewthread.php?tid=78114&extra=page%3D1)中的病毒样本提取出来的4个衍生物

过所有杀软..大家各自给自己的杀软上报吧

象这种杀软不报的毒..如没有HIPS的话就中招了

tracydk

上报

蓝色牛仔裤

原样本好像不是病毒吧...听银月说只是恶意软件.
而且原样本都不报, 生成物就.....
相信只要上报原样本. 经他们分析应该后就可以杀掉生成物了..

tracydk

AhnLab-V3 2007.4.26.0 04.26.2007  no virus found
AntiVir 7.4.0.15 04.26.2007  no virus found
Authentium 4.93.8 04.26.2007  no virus found
Avast 4.7.981.0 04.26.2007  no virus found
AVG 7.5.0.464 04.25.2007  no virus found
BitDefender 7.2 04.26.2007  no virus found
CAT-QuickHeal 9.00 04.25.2007  no virus found
ClamAV devel-20070416 04.26.2007  no virus found
DrWeb 4.33 04.26.2007  no virus found
eSafe 7.0.15.0 04.25.2007  no virus found
eTrust-Vet 30.7.3597 04.26.2007  no virus found
Ewido 4.0 04.26.2007  no virus found
FileAdvisor 1 04.26.2007  no virus found
Fortinet 2.85.0.0 04.26.2007  no virus found
F-Prot 4.3.2.48 04.25.2007  no virus found
F-Secure 6.70.13030.0 04.26.2007  no virus found
Ikarus T3.1.1.5 04.26.2007  no virus found
Kaspersky 4.0.2.24 04.26.2007  no virus found
McAfee 5017 04.25.2007  no virus found
Microsoft 1.2405 04.26.2007  no virus found
NOD32v2 2220 04.26.2007  no virus found
Norman 5.80.02 04.26.2007  no virus found
Panda 9.0.0.4 04.26.2007 Suspicious file
Prevx1 V2 04.26.2007  no virus found
Sophos 4.16.0 04.23.2007  no virus found
Sunbelt 2.2.907.0 04.19.2007  no virus found
Symantec 10 04.26.2007  no virus found
TheHacker 6.1.6.095 04.15.2007  no virus found
VBA32 3.11.4 04.26.2007  no virus found
VirusBuster 4.3.7:9 04.26.2007  no virus found
Webwasher-Gateway 6.0.1 04.26.2007 no virus found


熊猫报启发了

tracydk

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00036120.




We received the following archive files:


File ID  Filename  Size (Byte) Result
278598  tm_35.rar 167.73 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
276957  tm_35.tmp  804.05 KB  MALWARE
Please find a detailed report concerning each individual sample below:

Filename Result  tm_35.tmp  MALWARE

The file 'tm_35.tmp' has been determined to be 'MALWARE'. Virus name is DROPPER (en) Detection will be added to our virus definition file (VDF) with one of the next updates.

chow2006

全过了费尔

dyw1021

原帖由 chow2006 于 2007-4-27 00:59 发表
全过了费尔

想问你一下
你的全过是什么意思
你试了动态防御？？？？？？
怎么我试了，没有能过啊！~~~~~~
你作为费尔的版主
希望用事实说话！~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
扫描不能解决问题！~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
要试就试完吧！~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

野马

人家是以讹传讹，
楼主是以牛吹牛！

mofunzone

有种叫做效率的东西

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\tm_35.rar'
C:\Documents and Settings\morgan\My Documents\
  tm_35.rar
    [0] Archive type: RAR
    --> tm_35.tmp
        [DETECTION] Contains signature of the dropper DR/Agent.AV
        [WARNING]   Infected files in archives cannot be repaired!
    --> BADB.EXE
        [DETECTION] Is the Trojan horse TR/Agent.avh
        [WARNING]   Infected files in archives cannot be repaired!
    --> BADC.EXE
        [DETECTION] Is the Trojan horse TR/Agent.avf
        [WARNING]   Infected files in archives cannot be repaired!
    --> BADDLL.dll
        [DETECTION] Is the Trojan horse TR/Agent.avg
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月26日  18:44
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      5 Warnings
      0 Notes
      0 Hidden objects were found

xpn282

你们现在能杀的,,都是已经上报了的...

除主动防御外