样本

显示全部楼层 · 发表于 2007-6-1 17:21:19

一个

显示全部楼层 · 发表于 2007-6-1 17:23:11

avast挂了

显示全部楼层 · 发表于 2007-6-1 17:23:19

卡7杀

显示全部楼层 · 发表于 2007-6-1 17:23:52

gmsex.exe - Win32/PSW.Lineage.ACN 木马

显示全部楼层 · 发表于 2007-6-1 17:23:59

AVG Anti-Spyware 7.5 报Downloader.Psyme.he

显示全部楼层 · 发表于 2007-6-1 17:25:33

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\vir.rar'
C:\Documents and Settings\morgan\My Documents\
  vir.rar
[0] Archive type: RAR
--> ibabyhood\gmsex.exe
      [DETECTION] Is the Trojan horse TR/Spy.iahu.2
      [WARNING] Infected files in archives cannot be repaired!
--> ibabyhood\h.htm
      [DETECTION] Contains signature of the Java script virus JS/Dldr.Agent.tan
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-1 17:26:21

砍杀一个，htm格式文件没法测试

显示全部楼层 · 发表于 2007-6-1 17:27:56

KIS 7报了2个
已经删除: 病毒 Virus.Win32.AutoRun.ar 文件: D:\Downloads\vir.rar/ibabyhood\gmsex.exe//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
已经删除: 木马程序 Trojan-Downloader.VBS.Psyme.he 文件: D:\Downloads\vir.rar/ibabyhood\h.htm

显示全部楼层 · 发表于 2007-6-1 20:17:30

儿童节的样本还真多啊。。

[Scan path] C:\Documents and Settings\Administrator\桌面\vir.rar
>>>C:\Documents and Settings\Administrator\桌面\vir.rar\ibabyhood\gmsex.exe infected with Trojan.PWS.Ran
>>C:\Documents and Settings\Administrator\桌面\vir.rar\ibabyhood\h.htm\VBScript.0 - Ok
>C:\Documents and Settings\Administrator\桌面\vir.rar\ibabyhood\h.htm - Ok
C:\Documents and Settings\Administrator\桌面\vir.rar - archive contains infected objects

显示全部楼层 · 发表于 2007-6-1 20:31:53

驅逐艦
gmsex.exe Trojan.PWS.Ran

[病毒样本] 样本

本帖子中包含更多资源

本帖子中包含更多资源