非常恶毒的广告[MD5: 62D28E B7E560]

显示全部楼层 · 发表于 2007-6-16 11:05:15

nod32杀广告比较LJ。。。。

显示全部楼层 · 发表于 2007-6-16 11:06:44

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年6月16日11时9分58秒开始查杀C:\Documents and Settings\Administrator\桌面\virus\0Temp5088_1180619848\样本666
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\virus\0Temp5088_1180619848\样本666\bind_50007.exe 带壳文件:UPX加壳
-----------------------------------------

2007年6月16日11时9分59秒收起线程…100% 查杀完毕！
扫描文件：2查杀病毒：0

同楼上

显示全部楼层 · 发表于 2007-6-16 11:07:03

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
[0] Archive type: RAR
--> bind_50007.exe
--> ruango0021.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-6-16 11:07:28

AVK统杀

显示全部楼层 · 发表于 2007-6-16 11:07:58

deleted: Trojan program Trojan-Downloader.Win32.QQHelper.qz File: C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar/bind_50007.exe//PE_Patch.UPX//UPX//PE_Patch//data0002
deleted: adware not-a-virus:AdWare.Win32.WSearch.o File: C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar/ruango0021.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-6-16 11:08:15

下午换ess试一试

显示全部楼层 · 发表于 2007-6-16 11:08:41

Virus: Trojan-Downloader.Win32.QQHelper.qz, not-a-virus:AdWare.Win32.WSearch.o

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-16 11:09:23

伞C
Begin scan in 'F:\样本.rar'
F:\样本.rar
  [0] Archive type: RAR
  --> ruango0021.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    A backup was created as '46a1bc42.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-16 11:11:06

bind_50007.exe
运行后antivir秒杀
A-Squared
Found nothing
AntiVir
Found HEUR/Malware
ArcaVir
Found nothing
Avast
Found Win32:Qqhelper-BX
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found Trojan-Downloader.Win32.QQHelper.qz
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Trojan-Downloader.Win32.QQHelper.qz
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found Trojan.DL.Linis.ap
VirusBuster
Found nothing
VBA32
Found nothing

[ 本帖最后由 mofunzone 于 2007-6-15 19:13 编辑 ]

[病毒样本] 非常恶毒的广告[MD5: 62D28E B7E560]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源