卡巴杀了

绅博周幸

扫

mofunzone

唉。。
过XX用得到nsanti这种东西么。。

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\my_70032.rar'
C:\Documents and Settings\Administrator\My Documents\
  my_70032.rar
    [0] Archive type: RAR
    --> my_70032.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

绅博周幸

原帖由 mofunzone 于 2007-6-26 15:24 发表
唉。。
过XX用得到nsanti这种东西么。。

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\my_70032.rar'
C:\Documents and Settings\Administrator\My  ...

问题是用特征码定位器改的话容易改坏啊

绅博周幸

A-Squared  Found nothing
AntiVir  Found TR/Crypt.NSAnti.Gen  
ArcaVir  Found nothing
Avast  Found Win32:MianCrypt-gen  
AVG Antivirus  Found nothing
BitDefender  Found Packer.Malware.NSAnti.A  
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found Trojan-Downloader.Win32.Small.evi  
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

mofunzone

一会我给你改一个dll，专门过nod的

1688388728

病毒: Trojan-Downloader.Win32.Small.evi
檔案: my_70032[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3AIEVJEN
處理序: GreenBrowser.exe

promised

加了NSANTI就会报这个
C:/ABC/\my_70032.rar:\my_70032.exe - Signature 'Backdoor.Win32.Hupigon.RS' found
C:/ABC/\my_70032.rar

        2 Files scanned
          (1 Archiv with 1 file)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.297

tracydk

yashoo

这样报大部分是因为加了壳

剑指七星

已检测到: 木马程序 Trojan-Downloader.Win32.Small.evi        URL: http:/bbs.kafan.cn/attachment.php?aid=93252/my_70032.exe/PE_Patch.NSAnti/NSAnti

PS:MD5呢？     MD5呢？

[ 本帖最后由 剑指七星 于 2007-6-26 18:13 编辑 ]