AST VirList 3月第一期 超高质量 诺顿36个杀12个···

目暮十三

1.exe不是毒
10.exe由6釋放
13，14同種在不同軟件網站下載adware
30，31同種
15到24全部一個類型
下載地址
worldofart-ltd.info/files/worldofartltd.exe
vintagegroup-inc.com/files/vintagegroupinc.exe
vintage-groupco.biz/files/vintagegroupinc.exe
tinassanservice-groupllc.cc/files/tinassanservicegroupllc.exe
tinassanserviceant-antteam.net/files/tinassanservicegroupllc.exe
throne-uk.at/files/thronegroupllc.exe
throne-groupllc.cc/files/thronegroupllc.exe
techouse-group.cc/files/ukhousegroupnet.exe
techadv-inc.cc/files/techsoftadvinc.exe
stilegroup-llc.ws/files/stilegroupllc.exe
stile-groupllc.net/files/stilegroupllc.exe
royalthelmas-teamant.asia/files/royalthelmasgroupllc.exe
royalthelmas-group-llc.cc/files/royalthelmasgroupllc.exe
renaissance-llc.cc/files/renaissancellc.exe
renaissancellc.be/files/renaissancellc.exe
paultonsgroup-ltd.info/files/paultonsgroupltd.exe
online-solutionsllc.cc/files/onlinesolutionsllc.exe
nimrodltd-uk.net/files/nimrodinc.exe
mimosa-groupus.cc/files/mimosagroupus.exe
millennial-artco.biz/files/millennialartco.exe
millennial-maingrop.net/files/millennialartco.exe
gogo-teamant.com/files/gogogroupinc.exe
gogo-group-inc.cc/files/gogogroupinc.exe
fintec-ukltd.ws/files/fintecltd.exe
fintec-ltd.cc/files/fintecltd.exe
duncroft-group-inc.cc/files/duncroftgroupinc.exe
drysdale-group-inc.cc/files/drysdalegroupinc.exe
drysdale-antcorp.at/files/drysdalegroupinc.exe
dogo-group.net/files/dogogroup.exe
dogo-group.cc/files/dogogroup.exe
devasteam-ant.ws/files/devasllc.exe
creatence-groupllc.cc/files/createncegroupllc.exe
creatence-groupllc.at/files/createncegroupllc.exe
。。。
同類型過多，成績代表不了什麼，測試意義不大

endgospel

卡巴干掉12个然后被病毒干掉然后系统崩溃
金山毒霸干掉20个蜘蛛干掉13个

留侯

大蜘蛛发现14个：

RIO\5.exe 已感染：  Trojan.DownLoader2.15428
RIO\6.exe/tmp.exe 已感染：  Trojan.DownLoader1.45893
RIO\7.exe 可能已感染：  BACKDOOR.Trojan
RIO\8.exe 已感染：  Trojan.DownLoad2.14457
RIO\9.exe 已感染：  Trojan.MulDrop1.37599
RIO\10.exe 已感染：  Trojan.DownLoader1.45893
RIO\11.exe 已感染：  Trojan.MulDrop1.58696
RIO\13.exe 已感染：  Trojan.DownLoader2.15427
RIO\14.exe 已感染：  Trojan.DownLoader2.15426
RIO\25.exe 已感染：  Trojan.DownLoader2.15217
RIO\28.exe 是广告软件 Adware.Toolbar
RIO\31.exe 已感染：  Trojan.Click1.32120
RIO\33.exe 已感染：  Trojan.MulDrop2.5208
RIO\34.exe/?\?\?\qqlogin.dll 已感染：  Trojan.DownLoad2.17656

余下已上报！

z13667152750

比较好奇样本来源??

wjcharles

endgospel 发表于 2011-2-27 19:19
卡巴干掉12个然后被病毒干掉然后系统崩溃
金山毒霸干掉20个蜘蛛干掉13个

很好奇卡巴是被几号样本干掉的？

年下

wjcharles 发表于 2011-2-27 22:52
很好奇卡巴是被几号样本干掉的？

同好奇…卡巴竟然被干掉了，怎么被干掉的啊…

缘木求鱼me

我强烈怀疑有几个是安全的

jason_jiang

d:\Backup\Desktop\vir\RIO\15.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\16.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\17.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\18.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\19.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\20.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\21.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\22.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\23.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\24.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\25.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\26.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\30.exe (Trojan.StartPage) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\31.exe (Trojan.StartPage) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\33.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\5.exe (Adware.Agent) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\8.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
d:\Backup\Desktop\vir\RIO\9.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.

junyangxie

QVM kill 16X，1.exe非有效PE

G:\daily\20110228\RIO\RIO\10.exe   Malware.QVM07.Gen
G:\daily\20110228\RIO\RIO\11.exe   Malware.QVM19.Gen
G:\daily\20110228\RIO\RIO\12.exe   Malware.QVM08.Gen
G:\daily\20110228\RIO\RIO\13.exe   Malware.QVM07.Gen
G:\daily\20110228\RIO\RIO\14.exe   Malware.QVM07.Gen
G:\daily\20110228\RIO\RIO\2.exe   Malware.QVM17.Gen
G:\daily\20110228\RIO\RIO\25.exe   Malware.QVM20.Gen
G:\daily\20110228\RIO\RIO\26.exe   Malware.QVM18.Gen
G:\daily\20110228\RIO\RIO\27.exe   Malware.QVM13.Gen
G:\daily\20110228\RIO\RIO\28.exe   Malware.QVM13.Gen
G:\daily\20110228\RIO\RIO\33.exe   Malware.QVM06.Gen
G:\daily\20110228\RIO\RIO\36.exe   Malware.QVM06.Gen
G:\daily\20110228\RIO\RIO\4.exe   Malware.QVM03.Gen
G:\daily\20110228\RIO\RIO\6.exe   Malware.QVM06.Gen
G:\daily\20110228\RIO\RIO\7.exe   Malware.QVM03.Gen
G:\daily\20110228\RIO\RIO\9.exe   Malware.QVM11.Gen

endgospel

回复 25楼 wjcharles 的帖子

先把卡巴关掉然后解压病毒在启动卡巴扫描你就知道了