09/04/18 21:31:09
>>552
カスペからの返事
10/12 （0,b以外）、白1(b), 回答待ち1(0)
b\mdm365patch.exe
No malicious code was found in this file.
568:名無しさん＠お腹いっぱい。
09/04/19 01:42:24
>>562
>>553ですが、Avast!がうまくうごいてなかったみたいだ。
569:名無しさん＠お腹いっぱい。
09/04/19 23:05:35
ドイツのプログラミングイベント『Breakpoint 2009』の4KB部門で
優勝したメガデモのファイル配布先でウイルス反応
URLﾘﾝｸ(ftp.untergrund.net)
VTにて結果: 12/40 (30.00%)
570:名無しさん＠お腹いっぱい。
09/04/19 23:12:51
>>569
zip解凍すると13だね
なんかパッカーに反応してるだけのようにも見えるけど
571:名無しさん＠お腹いっぱい。
09/04/20 15:15:15
URLﾘﾝｸ(tane.sakuratan.com)
virus
572:名無しさん＠お腹いっぱい。
09/04/20 17:03:42
>>571
BitDefenderTotalSecurity2009
3.exe DeepScan:Generic.Malware.dldspTkg.6A26CDAD Moved to Quarantine
autorun1.exe Gen:Trojan.Heur.1024456363 Moved to Quarantine
nspk1.exe Trojan.Crypt.CY Moved to Quarantine
nspk2.exe Trojan.Crypt.CY Moved to Quarantine
upki1.exe Trojan.KillAV.PT Deleted
upki5.exe Trojan.KillAV.PT Deleted
upki9.exe Trojan.KillAV.PT Deleted
\upkx1.exe Trojan.KillAV.PT Deleted
upkx5.exe Trojan.KillAV.PT Deleted
upkx9.exe Trojan.KillAV.PT Deleted
x1.exe Trojan.KillAV.PT Deleted
x5.exe Trojan.KillAV.PT Deleted
x9.exe Trojan.KillAV.PT Deleted
以上全検出
573:名無しさん＠お腹いっぱい。
09/04/20 17:09:32
>>572
PandaGlobalProtection2009
ウイルス発見 : W32/Spamta.gen.worm：UPKI1.EXE、UPKX1.EXE、UPKI5.EXE、UPKI9.EXE、UPKX5.EXE、UPKX9.EXE
ウイルス発見 : Trj/CI.A：autorun1.exe
残りは疑わしいファイルとして検出、全検出
574:名無しさん＠お腹いっぱい。
09/04/20 17:15:14
>>572
AviraPremiumSecuritySuite9
3.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
upki1.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
upki5.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
upki9.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
upkx1.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
upkx5.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
upkx9.exe
[DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
x1.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
x5.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
x9.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
autorun1.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
nspk1.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
nspk2.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
全検出
575:名無しさん＠お腹いっぱい。
09/04/20 17:17:37
時間がないのであとは検出数だけ
>>571
avast!4.8
全検出
NortonInternetSecurity2009
3個検出
576:名無しさん＠お腹いっぱい。
09/04/20 17:31:42
>>571ありが㌧
Symantecとa-squaredに提出しておきました
577:名無しさん＠お腹いっぱい。
09/04/20 17:47:58
>>571
McAfeeに提出させて頂きました。
8/13
zip解凍時削除
nspk1.exe ,nspk2.exe ,upki1.exe ,upki5.exe ,upkx9.exe ,upkx5.exe ,upkx9.exe
フォルダを開いたら何故か削除
3.exe (New Malware.ab)
AVERT自動返信
3.exe |inconclusive | | |no
autorun1.exe |new detection |generic.dx!l |Trojan |yes
nspk1.exe |current detection |generic.dx |Trojan |no
nspk2.exe |current detection |generic.dx |Trojan |no
upki1.exe |heuristic detection |new malware.n |Trojan |no
upki5.exe |heuristic detection |new malware.n |Trojan |no
upki9.exe |heuristic detection |new malware.n |Trojan |no
upkx1.exe |new detection |generic.dx!l |Trojan |yes
upkx5.exe |new detection |generic.dx!l |Trojan |yes
upkx9.exe |heuristic detection |new malware.n |Trojan |no
x1.exe |inconclusive | | |no
x5.exe |inconclusive | | |no
x9.exe |inconclusive | | |no
578:名無しさん＠お腹いっぱい。
09/04/20 17:57:32
>>571
カスペ2009 17:38
13/13
Detected virus Worm.Win32.AutoRun.fpi \autorun1.exe
Detected Trojan program Trojan-Downloader.Win32.Agent.brtb \3.exe
Detected Trojan program Trojan-GameThief.Win32.OnLineGames.bkzf \nspk1.exe, nspk2.exe
Detected Trojan program Trojan.Win32.AntiAV.azv \upki1.exe, upkl5.exe, upkl9.exe, \x1.exe, x5.exe, x9.exe
Detected Trojan program Trojan.Win32.AntiAV.azt \upkx1.exe
Detected Trojan program Trojan.Win32.AntiAV.azs \upkx5.exe
Detected Trojan program Trojan.Win32.AntiAV.azu \upkx9.exe
579:名無しさん＠お腹いっぱい。
09/04/20 17:59:04
>>575
見逃し3個じゃないのね…
580:名無しさん＠お腹いっぱい。
09/04/20 18:39:24
ノートンとBitは(検出が)当たったときと外れたときの差が激しくて困る
581:名無しさん＠お腹いっぱい。
09/04/20 19:01:09
>>577
virustotalでは検出されてますね
McAfee - - New Malware.ab
ファイル名 3.exe 受理 2009.04.20 08:58:30
URLﾘﾝｸ(www.virustotal.com)
ファイル名 3.exe 受理 2009.04.20 11:50:56
URLﾘﾝｸ(www.virustotal.com)
582:名無しさん＠お腹いっぱい。
09/04/20 19:08:38
McAfeeもまれに手元とVirusTotalと提出後の自動応答で、結果が異なることがあるからな
大概手元の結果が一番悪いから困る
583:名無しさん＠お腹いっぱい。
09/04/20 20:11:16
>>572
>574でPremiumの人が出してるけど、AntiVir9Freeも全部撃墜。
584:名無しさん＠お腹いっぱい。
09/04/20 20:35:30
>>571
VirusTotal
3.exe (22/40) : URLﾘﾝｸ(www.virustotal.com)
autorun1.exe(27/39) : URLﾘﾝｸ(www.virustotal.com)
nspk1.exe (25/40) : URLﾘﾝｸ(www.virustotal.com)
nspk2.exe (35/40) : URLﾘﾝｸ(www.virustotal.com)
upki1.exe (24/40) : URLﾘﾝｸ(www.virustotal.com)
upki5.exe (24/40) : URLﾘﾝｸ(www.virustotal.com)
upki9.exe (25/40) : URLﾘﾝｸ(www.virustotal.com)
upkx1.exe (25/40) : URLﾘﾝｸ(www.virustotal.com)
upkx5.exe (19/40) : URLﾘﾝｸ(www.virustotal.com)
upkx9.exe (24/39) : URLﾘﾝｸ(www.virustotal.com)
x1.exe (21/40) : URLﾘﾝｸ(www.virustotal.com)
x5.exe (21/40) : URLﾘﾝｸ(www.virustotal.com)
x9.exe (20/40) : URLﾘﾝｸ(www.virustotal.com)
585:名無しさん＠お腹いっぱい。
09/04/20 20:59:52
>>571
Symantec自動返答 >575では3/13だけど、全対応の模様。次のパターン更新で対応かな？
filename: nspk2.exe
result: This file is detected as Trojan.KillAV.
filename: upki1.exe
result: This file is detected as Trojan.KillAV.
filename: upki5.exe
result: This file is detected as Trojan.KillAV.
filename: upki9.exe
result: This file is detected as Trojan.KillAV.
filename: nspk1.exe
result: This file is detected as Trojan.KillAV.
filename: 3.exe
result: This file is detected as Trojan Horse.
filename: autorun1.exe
result: This file is detected as Trojan.KillAV.
filename: x5.exe
result: This file is detected as Trojan.KillAV.
filename: x9.exe
result: This file is detected as Trojan.KillAV.
filename: upkx1.exe
result: This file is detected as Trojan.KillAV.
filename: upkx5.exe
result: This file is detected as Trojan.KillAV.
filename: x1.exe
result: This file is detected as Trojan.KillAV.
filename: upkx9.exe
result: This file is detected as Trojan.KillAV.
URLﾘﾝｸ(www.symantec.com)
URLﾘﾝｸ(www.symantec.com)
586:名無しさん＠お腹いっぱい。
09/04/20 21:06:52
>>571
>584のVTの結果でスルー、もしくは、ヒューリスティック、PAK_Generic.001なベンダーには一通り提出完了。
>>569
マイクロソフト返答。白判定。
Submitted Files
=============================================
20090420_m1.zip [Container]
+---sollbruchstelle.zip [Not Malware]
+---sollbruchstelle.exe [Not Malware]
587:名無しさん＠お腹いっぱい。
09/04/20 23:32:51
Rising 2009 21.35.04 (21.26.04.00)
>>571
autorun1.exe>>upx_c: Worm.Win32.DownLoader.fj
nspk1.exe>>nspack: Trojan.DL.Win32.Undef.dyf
nspk2.exe>>nspack: Trojan.DL.Win32.Undef.dyf
upki1.exe>>upack0.32: Trojan.Win32.AvKiller.ic
upki5.exe>>upack0.32: Trojan.Win32.AvKiller.ic
upki9.exe>>upack0.32: Trojan.Win32.AvKiller.ic
upkx1.exe: Trojan.DL.Win32.Mnless.cxo
upkx5.exe: Trojan.DL.Win32.Mnless.cxo
upkx9.exe: Trojan.DL.Win32.Mnless.cxo
x1.exe: Trojan.Win32.AvKiller.ic
x5.exe: Trojan.Win32.AvKiller.ic
x9.exe: Trojan.Win32.AvKiller.ic
12/13
>>521
追加検出: 1(+1)
スルー: 10