ay发的毒网的样本[MD5: E279CF]

显示全部楼层 · 发表于 2007-6-25 07:47:03

参考：http://bbs.kafan.cn/viewthread.php?tid=100682&extra=page%3D1

用易语言写的，这年头，刚学点东西就不干好事，用个数组都越界

g:\virus\temp\ads[1].exe - Signature 'Trojan.Win32.Agent.ala' found
1 File scanned
(0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.000

显示全部楼层 · 发表于 2007-6-25 07:56:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus'
C:\Documents and Settings\Administrator\My Documents\virus\
  ads[1].exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-6-25 08:00:28

靠易语言

显示全部楼层 · 发表于 2007-6-25 08:02:00

File: ads[1].exe
Status:
INFECTED/MALWARE
MD5: e279cf65a48e47325ed3549d07bf97e2
Packers detected:
PE_PATCH, NSPACK
Bit9 reports: File not found
Scanner results
Scan taken on 25 Jun 2007 00:02:33 (GMT)
A-Squared
Found nothing
AntiVir
Found PCK/NSPack
ArcaVir
Found nothing
Avast
Found Win32:Flyst
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
VirusBuster
Found Packed/NSPack
VBA32
Found Trojan.Win32.Agent.ala

显示全部楼层 · 发表于 2007-6-25 08:24:21

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:不正常分析中……在被感染的文件中已找不到未感染的文件

===============================================
___________病毒查杀结果__________________

===============================================

2007年5月25日8时29分21秒开始查杀C:\Documents and Settings\Administrator\桌面\virus\vir222us
未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\vir222us\ads[1].exe 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年5月25日8时29分21秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-6-25 08:52:57

这壳报的，看看卡巴怎么报

detected: Trojan program Trojan-Clicker.Win32.Flyst.d File: C:\Documents and Settings\Owner\×ÀÃæ\virus[1].part1.rar/ads[1].exe

[ 本帖最后由 wangjay1980 于 2007-6-25 16:53 编辑 ]

显示全部楼层 · 发表于 2007-6-25 08:56:37

显示全部楼层 · 发表于 2007-6-25 09:00:47

斧头不报

显示全部楼层 · 发表于 2007-6-25 14:41:00

病毒: Win32:Flyst [Trj]
檔案: ads[1].exe
目錄: E:\病毒库\virus

显示全部楼层 · 发表于 2007-6-25 16:53:42

detected: Trojan program Trojan-Clicker.Win32.Flyst.d File: C:\Documents and Settings\Owner\×ÀÃæ\virus[1].part1.rar/ads[1].exe

[病毒样本] ay发的毒网的样本[MD5: E279CF]

本帖子中包含更多资源

本帖子中包含更多资源