|
新兵
- 积分
- 1
- 威望
- 2
- 元宝
- 0
- 铜钱
- 0
|
1楼
大 中
小 发表于 2008-6-27 19:08 只看该作者
赤壁游戏盗号木马
文件尺寸: 小于 2048 kb
木马病毒要3MB多，所以上传不了
下载地址： http://www.xwg8.com/cbxxwg.rar
=========以下是世界杀毒网的扫描报告============
文件 __________________.exe 接收于 2008.06.27 13:08:29 (CET)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 | | AhnLab-V3 | 2008.6.27.1 | 2008.06.27 | Win-Trojan/Xema.variant | | AntiVir | 7.8.0.59 | 2008.06.27 | - | | Authentium | 5.1.0.4 | 2008.06.27 | W32/Nuj.A.gen!Eldorado | | Avast | 4.8.1195.0 | 2008.06.26 | - | | AVG | 7.5.0.516 | 2008.06.26 | - | | BitDefender | 7.2 | 2008.06.27 | Trojan.Flystudio.AI | | CAT-QuickHeal | 9.50 | 2008.06.26 | - | | ClamAV | 0.93.1 | 2008.06.27 | Trojan.Dropper-2514 | | DrWeb | 4.44.0.09170 | 2008.06.27 | - | | eSafe | 7.0.17.0 | 2008.06.26 | - | | eTrust-Vet | 31.6.5911 | 2008.06.27 | Win32/Nuj.A | | Ewido | 4.0 | 2008.06.27 | - | | F-Prot | 4.4.4.56 | 2008.06.27 | W32/Nuj.A.gen!Eldorado | | F-Secure | 7.60.13501.0 | 2008.06.26 | - | | Fortinet | 3.14.0.0 | 2008.06.27 | - | | GData | 2.0.7306.1023 | 2008.06.27 | - | | Ikarus | T3.1.1.26.0 | 2008.06.27 | Virus.Win32.Rbot.CXN | | Kaspersky | 7.0.0.125 | 2008.06.27 | - | | McAfee | 5326 | 2008.06.26 | - | | Microsoft | 1.3704 | 2008.06.27 | Worm:Win32/Nuj.A | | NOD32v2 | 3223 | 2008.06.27 | - | | Norman | 5.80.02 | 2008.06.26 | - | | Panda | 9.0.0.4 | 2008.06.26 | - | | Prevx1 | V2 | 2008.06.27 | - | | Rising | 20.50.42.00 | 2008.06.27 | - | | Sophos | 4.30.0 | 2008.06.27 | Troj/Dropr-K | | Sunbelt | 3.0.1176.1 | 2008.06.26 | - | | Symantec | 10 | 2008.06.27 | - | | TheHacker | 6.2.96.362 | 2008.06.27 | - | | TrendMicro | 8.700.0.1004 | 2008.06.27 | - | | VBA32 | 3.12.6.8 | 2008.06.27 | - | | VirusBuster | 4.5.11.0 | 2008.06.23 | - | | Webwasher-Gateway | 6.6.2 | 2008.06.27 | Win32.Malware.gen (suspicious) |
| | 附加信息 | | File size: 3698307 bytes | | MD5...: 0e9874217d0ec178970e978f8368ed16 | | SHA1..: 18eb909dbb5742b21ebd3b174d980fa807364ff2 | | SHA256: de9289bb80f83fd71332692cdb5963a02e1702f954701ba3571d4f2560f483c6 | | SHA512: 4e55c5c6728b3a5d93851311b20e425a00ffb0b37a7e2bf5e6ac5d0349287099<BR>e772bb833bacbc23a88f183898494fb6bde7d0fbd9e41fe9d404da9a75caf2d8 | | PEiD..: Armadillo v1.71 | | PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x40389f<BR>timedatestamp.....: 0x3925136b (Fri May 19 10:11:55 2000)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x5a77 0x6000 6.45 3c3a2fc631e2e10352a7f1de7f1e1615<BR>.rdata 0x7000 0xab4 0x1000 3.73 463198fd8b2f88fd5103d98401bc4208<BR>.data 0x8000 0x3fa0 0x4000 1.63 4d10d5012dbf5bb91ac5ce1ef6fe5d8c<BR>.ecode 0xc000 0x310000 0x310000 7.73 2052e9487d01404d739bf7e179292bf2<BR>.rsrc 0x31c000 0x1160 0x2000 3.10 fcb7accf2a7a0c761f06e5d45865a7c7<BR><BR>( 2 imports ) <BR>> KERNEL32.dll: GetProcAddress, LoadLibraryA, CloseHandle, WriteFile, CreateDirectoryA, GetTempPathA, ReadFile, SetFilePointer, CreateFileA, GetModuleFileNameA, GetStringTypeA, LCMapStringW, LCMapStringA, HeapAlloc, HeapFree, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, GetVersion, ExitProcess, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, RtlUnwind, GetCPInfo, GetACP, GetOEMCP, MultiByteToWideChar, GetStringTypeW<BR>> USER32.dll: MessageBoxA, wsprintfA<BR><BR>( 0 exports ) <BR> | | packers (Kaspersky): PE_Patch.UPX, UPX |
[ 本帖最后由 举报贱人 于 2008-6-27 19:10 编辑 ]
|
