收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 这个安装的软件好像是病毒
12下一页
返回列表 发新帖
查看: 3155|回复: 11
收起左侧

[病毒样本] 这个安装的软件好像是病毒

[复制链接]
mocsnafpk
发表于 2007-5-20 08:59:08 | 显示全部楼层 |阅读模式
帮忙检查

http://www.virustotal.com/vt/en/resultadof?3a2d67cc30d00ecb79736e92063c377e

STATUS: FINISHED
Complete scanning result of "setup.exe", received in VirusTotal at 05.20.2007, 02:43:03 (CET).

AntivirusVersionUpdateResult
AhnLab-V32007.5.16.105.18.2007 [td]no virus found
AntiVir7.4.0.2305.18.2007 [td]no virus found
Authentium4.93.805.18.2007 [td]no virus found
Avast4.7.997.005.18.2007 [td]no virus found
AVG7.5.0.46705.19.2007 [td]no virus found
BitDefender7.205.20.2007 [td]no virus found
CAT-QuickHeal9.0005.18.2007 [td]no virus found
ClamAVdevel-2007041605.19.2007 [td]no virus found
DrWeb4.3305.19.2007 [td]no virus found
eSafe7.0.15.005.17.2007 [td]no virus found
eTrust-Vet30.7.364405.19.2007 [td]no virus found
Ewido4.005.19.2007 [td]no virus found
FileAdvisor105.20.2007 [td]no virus found
Fortinet2.85.0.005.19.2007 [td]no virus found
F-Prot4.3.2.4805.18.2007 [td]no virus found
F-Secure6.70.13030.005.18.2007 [td]no virus found
IkarusT3.1.1.705.19.2007 [td]no virus found
Kaspersky4.0.2.2405.20.2007 [td]no virus found
McAfee503405.18.2007 [td]no virus found
Microsoft1.250305.19.2007 [td]no virus found
NOD32v2227705.18.2007 [td]no virus found
Norman5.80.0205.18.2007 [td]no virus found
Panda9.0.0.405.19.2007 [td]no virus found
Prevx1V205.20.2007 [td]no virus found
Sophos4.17.005.18.2007 [td]no virus found
Sunbelt2.2.907.005.17.2007 [td]no virus found
Symantec1005.20.2007 [td]no virus found
TheHacker6.1.6.11805.18.2007 [td]no virus found
VBA323.12.005.18.2007 [td]no virus found
VirusBuster4.3.7:905.19.2007 [td]no virus found
Webwasher-Gateway6.0.105.18.2007 [td]no virus found


Aditional Information
File size: 71332 bytes
MD5: 8153cdd7b65534c218b6fac791faad43
SHA1: b7203907dcbd1183799121f6b81a31d0c43e56ca
packers: BINARYRES, BINARYRES

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

raistlin533
发表于 2007-5-20 09:05:45 | 显示全部楼层
卡巴木反应
回复

举报

1p1
发表于 2007-5-20 09:26:10 | 显示全部楼层
个人觉得不是

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

seamonkey
发表于 2007-5-20 09:49:03 | 显示全部楼层
密码保护？
回复

举报

mocsnafpk
 楼主| 发表于 2007-5-20 09:53:49 | 显示全部楼层
卡巴能抓到了 会不会太快了呢

安装后问题就出来了
setup.exe 链接 85.255.118.3 并下载
启动 rundll32.exe 链接 keratomir2.biz 85.255.117.204
然后跳出警告信息 System Alert!
好像是zlob的变种
主要文件是这个 umicu.dll
在 %system32% 里


http://www.virustotal.com/vt/en/resultadof?234ea5714946cd96f98d918cac61922a

STATUS: FINISHED
Complete scanning result of "setup.exe", received in VirusTotal at 05.20.2007, 03:49:48 (CET).

AntivirusVersionUpdateResult
AhnLab-V32007.5.16.105.18.2007 [td]no virus found
AntiVir7.4.0.2305.18.2007 [td]no virus found
Authentium4.93.805.18.2007 [td]no virus found
Avast4.7.997.005.18.2007 [td]no virus found
AVG7.5.0.46705.19.2007 [td]no virus found
BitDefender7.205.20.2007 [td]no virus found
CAT-QuickHeal9.0005.18.2007 [td]no virus found
ClamAVdevel-2007041605.19.2007 [td]no virus found
DrWeb4.3305.19.2007 [td]no virus found
eSafe7.0.15.005.17.2007 [td]no virus found
eTrust-Vet30.7.364405.19.2007 [td]no virus found
Ewido4.005.19.2007 [td]no virus found
FileAdvisor105.20.2007 [td]no virus found
Fortinet2.85.0.005.20.2007 [td]no virus found
F-Prot4.3.2.4805.18.2007 [td]no virus found
F-Secure6.70.13030.005.18.2007 [td]no virus found
IkarusT3.1.1.705.19.2007 [td]no virus found
Kaspersky4.0.2.2405.20.2007 Trojan-Downloader.Win32.Zlob.bua
McAfee503405.18.2007 [td]no virus found
Microsoft1.250305.20.2007 [td]no virus found
NOD32v2227705.18.2007 [td]no virus found
Norman5.80.0205.18.2007 [td]no virus found
Panda9.0.0.405.19.2007 [td]no virus found
Prevx1V205.20.2007 [td]no virus found
Sophos4.17.005.18.2007 [td]no virus found
Sunbelt2.2.907.005.17.2007 [td]no virus found
Symantec1005.20.2007 [td]no virus found
TheHacker6.1.6.11805.18.2007 [td]no virus found
VBA323.12.005.18.2007 [td]no virus found
VirusBuster4.3.7:905.19.2007 [td]no virus found
Webwasher-Gateway6.0.105.18.2007 [td]no virus found


Aditional Information
File size: 71332 bytes
MD5: 8153cdd7b65534c218b6fac791faad43
SHA1: b7203907dcbd1183799121f6b81a31d0c43e56ca
packers: BINARYRES, BINARYRES


[ 本帖最后由 mocsnafpk 于 2007-5-20 09:58 编辑 ]
回复

举报

solcroft
发表于 2007-5-20 10:02:20 | 显示全部楼层
Zlob木马解放者，病毒文件藏在安装包里，所以杀软扫不出
回复

举报

raistlin533
发表于 2007-5-20 10:04:43 | 显示全部楼层
从此帖子可以看出 卡巴的病毒样本捕捉 能力
回复

举报

mofunzone
发表于 2007-5-20 10:07:28 | 显示全部楼层
有问题的东西我发出来吧
File:           laf13A.rar
Status:        
INFECTED/MALWARE
MD5         4de9f6d3cafa58869db68ec19b7c71af
Packers detected:        
PE_PATCH.UPX, UPX
Scanner results
Scan taken on 20 May 2007 02:05:29 (GMT)
A-Squared        
Found nothing
AntiVir        
Found TR/Drop.FraudTool.B, DR/FraudTool.S.BC.2
ArcaVir        
Found Trojan.Downloader.Agent.Bkd
Avast        
Found nothing
AVG Antivirus        
Found Downloader.Agent.LOQ
BitDefender        
Found Trojan.FakeAlert.DV
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found Trojan-Downloader.Win32.Agent.bkd
Fortinet        
Found W32/Agent.BKD!tr.dldr
Kaspersky Anti-Virus        
Found Trojan-Downloader.Win32.Agent.bkd
NOD32        
Found Win32/Hoax.Renos.NBB application
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found Trojan-Downloader.Win32.Agent.bkd

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

taihuxian
发表于 2007-5-20 10:48:20 | 显示全部楼层

AVK2007

Virus: Trojan-Downloader.Win32.Agent.bkd

Virus found while downloading Web content.

Address: bbs.kafan.cn


General description:
        Trojan-Downloader.Win32.Agent.bkd is an independently working program with a hidden payload. It has no propagation routines.
回复

举报

caocao
发表于 2007-5-20 12:14:15 | 显示全部楼层
是啊，KIS速度太快了
已删除: 木马程序 Trojan-Downloader.Win32.Zlob.bua        文件: D:\Downloads\setupvvv.rar/setup.exe//stream//data0006
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-4 20:55 , Processed in 0.131352 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表