MD5:ed4677 后门一个

显示全部楼层 · 发表于 2007-7-2 20:18:30

体积颇大，不是鸽子

卡巴已知，不用测了

显示全部楼层 · 发表于 2007-7-2 20:21:44

看KAV引擎所报的似乎是“玉兔”，BD引擎的deepscan又出来了，有够厉害
就是AVAST引擎没报

显示全部楼层 · 发表于 2007-7-2 20:23:48

费尔后门，看来比较老的病毒了。

显示全部楼层 · 发表于 2007-7-2 20:23:51

NOD32被过了.........

显示全部楼层 · 发表于 2007-7-2 20:25:49

这个后门还算新

显示全部楼层 · 发表于 2007-7-2 20:32:18

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\virus.exe : is suspected of Trojan-Spy.Banker.2
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 19
- scanned       : 1    -  scanned : 1    - scanned    : 18
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

Startup : 20:31:51 02-07-2007
End       : 20:32:04 02-07-2007
Total time : 00:00:13
终止批处理操作吗(Y/N)?
C:\ABC\virus.rar:\virus.exe - Signature 'Virus.Win32.Delf.m' found
C:\ABC\virus.rar

2 Files scanned
   (1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.031

显示全部楼层 · 发表于 2007-7-2 21:01:29

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

显示全部楼层 · 发表于 2007-7-2 21:19:42

加壳过一堆杀软。。。。无语ing

显示全部楼层 · 发表于 2007-7-2 21:21:13

antivir也。..

显示全部楼层 · 发表于 2007-7-2 21:25:33

virus.rar\virus.exe;D:\Documents and Settings\dell\桌面\virus.rar;Trojan.MulDrop.7381;

[病毒样本] MD5:ed4677 后门一个

本帖子中包含更多资源

本帖子中包含更多资源

BD报的很变态DeepScan:Generic.Malware.G!SK!I!!FLMP!WX!!Vg.01D36A0F

DR WEB

浏览过的版块