东方卫士官方网站最新挂马样本，过卡巴

显示全部楼层 · 发表于 2007-5-14 03:22:25

A-Squared	Found nothing
AntiVir	Found TR/Crypt.NSPM.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found GenPack:Generic.Malware.WBdld.EA28D835
ClamAV	Found nothing
Dr.Web	Found BackDoor.Huai
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found a variant of Win32/TrojanDownloader.Delf.BHO
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan-Dropper.Agent.35 (probable variant)

显示全部楼层 · 发表于 2007-5-14 03:56:35

AhnLab-V3	2007.5.10.0	05.11.2007 [td]no virus found
AntiVir	7.4.0.15	05.12.2007	TR/Crypt.NSPM.Gen
Authentium	4.93.8	05.12.2007 [td]no virus found
Avast	4.7.997.0	05.13.2007 [td]no virus found
AVG	7.5.0.467	05.13.2007 [td]no virus found
BitDefender	7.2	05.13.2007	GenPack:Generic.Malware.WBdld.EA28D835
CAT-QuickHeal	9.00	05.12.2007	(Suspicious) - DNAScan
ClamAV	devel-20070416	05.13.2007 [td]no virus found
DrWeb	4.33	05.13.2007	BackDoor.Huai
eSafe	7.0.15.0	05.13.2007	Suspicious Trojan/Worm
eTrust-Vet	30.7.3628	05.11.2007 [td]no virus found
Ewido	4.0	05.13.2007 [td]no virus found
FileAdvisor	1	05.13.2007 [td]no virus found
Fortinet	2.85.0.0	05.13.2007	suspicious
F-Prot	4.3.2.48	05.12.2007 [td]no virus found
F-Secure	6.70.13030.0	05.11.2007 [td]no virus found
Ikarus	T3.1.1.7	05.13.2007	Backdoor.Win32.Hupigon.BV
Kaspersky	4.0.2.24	05.13.2007 [td]no virus found
McAfee	5029	05.11.2007	New Malware.ct
Microsoft	1.2503	05.13.2007 [td]no virus found
NOD32v2	2262	05.12.2007	a variant of Win32/TrojanDownloader.Delf.BHO
Norman	5.80.02	05.11.2007 [td]no virus found
Panda	9.0.0.4	05.13.2007	Suspicious file
Prevx1	V2	05.13.2007 [td]no virus found
Sophos	4.17.0	05.11.2007 [td]no virus found
Sunbelt	2.2.907.0	05.12.2007	VIPRE.Suspicious
Symantec	10	05.13.2007 [td]no virus found
TheHacker	6.1.6.114	05.12.2007 [td]no virus found
VBA32	3.12.0	05.13.2007	suspected of Trojan-Dropper.Agent.35
VirusBuster	4.3.7:9	05.13.2007 [td]no virus found
Webwasher-Gateway	6.0.1	05.13.2007	Trojan.Crypt.NSPM.Gen

Aditional Information

File size: 18647 bytes

MD5: 7ca7de54ada830b763415ec283ec1f2a

SHA1: 469f29a4761139c8ab1524bd8c94ae53536819d0

packers: NSPack, PE_Patch

Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

显示全部楼层 · 发表于 2007-5-14 04:06:17

显示全部楼层 · 发表于 2007-5-14 04:15:36

好长时间没来了。晚上都不睡觉。

显示全部楼层 · 发表于 2007-5-14 07:04:04

红伞报：TR/Crypt.NSPM.Gen
KIS6无反应
AVG7.5无反应

显示全部楼层 · 发表于 2007-5-14 10:15:03

很多人求样本，这个就是啊

显示全部楼层 · 发表于 2007-5-14 10:20:54

微点杀，报了可疑，这个样本调用svchost下载的病毒也被微点砍鸟

显示全部楼层 · 发表于 2007-5-14 10:33:29

东方卫士和暴风影音一样老是被挂

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PROTECTED\ IMAGEPATH C:\WINDOWS\SYSREMDRIVES.EXE

[ 本帖最后由 Nblock 于 2007-5-14 10:36 编辑 ]

显示全部楼层 · 发表于 2007-5-14 10:36:27

服务器漏洞百出

网络管理员计算机水平一般~~

显示全部楼层 · 发表于 2007-5-14 10:39:44

原帖由 tonger2003 于 2007-5-14 10:36 发表
服务器漏洞百出

网络管理员计算机水平一般~~

zqr比他们强多了

只是开的低启发