MD5: 3472b3又见AV终结者(过卡吧\瑞星\Dr)

显示全部楼层 · 发表于 2007-7-6 15:14:01

1.3的FSG老壳,没什么研究价值```

可能是牛X生成器的...

显示全部楼层 · 发表于 2007-7-6 15:15:08

c:\ABC\keosovp.rar:\keosovp.exe - Signature 'Worm.Win32.Delf.ce' found
c:\ABC\keosovp.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.218

显示全部楼层 · 发表于 2007-7-6 15:15:51

Scan performed at: 2007-7-6 15:15:10
Scanning Log
NOD32 version 2381 (20070706) NT
Command line: C:\Documents and Settings\EQ2\桌面\keosovp.rar
Operating memory - is OK

Date: 6.7.2007 Time: 15:15:15
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\keosovp.rar
C:\Documents and Settings\EQ2\桌面\keosovp.rar ?RAR ?keosovp.exe - a variant of Win32/Delf.NDF worm
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:15:15 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-6 15:16:45

谢谢分享

显示全部楼层 · 发表于 2007-7-6 15:17:05

我卡巴没报

显示全部楼层 · 发表于 2007-7-6 15:18:00

上报

奇怪的是加的这个FSG壳，蜘蛛竟然没有脱下来，失守了
有用蜘蛛的再试试
Scan taken on 06 Jul 2007 07:15:07 (GMT)
A-Squared  Found nothing
AntiVir  Found TR/Agent.28829
ArcaVir  Found Trojan.Virus.Autorun.Ao
Avast  Found Win32:Delf-ERE
AVG Antivirus  Found Worm/Delf.CSG
BitDefender  Found Trojan.Autorun.BQ
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found Possibly a new variant of W32/Dlr-Trojan-Malware-based!Maximus
F-Secure Anti-Virus  Found nothing
Fortinet  Found W32/AutoRun.AO
Kaspersky Anti-Virus  Found nothing
NOD32  Found a variant of Win32/Delf.NDF
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found nothing
VirusBuster  Found Packed/FSG
VBA32  Found Trojan.PWS.Maran

显示全部楼层 · 发表于 2007-7-6 15:25:19

detected: virus Worm.Generic (modification) URL: http://bbs.kafan.cn/attachment.php?aid=97228//keosovp.exe

直接不让下载了.

显示全部楼层 · 发表于 2007-7-6 15:25:39

探测到: 病毒 Worm.Generic (变种) 网址: http://bbs.kafan.cn/attachment.php?aid=97228//keosovp.exe

显示全部楼层 · 发表于 2007-7-6 15:26:05

病毒: Win32:Delf-ERE [Wrm]
文件: keosovp[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QXL8YQ5H
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-6 15:28:19

原帖由 红心王子 于 2007-7-6 15:18 发表
上报

奇怪的是加的这个FSG壳，蜘蛛竟然没有脱下来，失守了
有用蜘蛛的再试试
Scan taken on 06 Jul 2007 07:15:07 (GMT)
A-Squared  Found nothing
AntiVir  Found TR/Agent.28829
ArcaVir  Found ...

是老壳了,没脱掉正常

[病毒样本] MD5: 3472b3又见AV终结者(过卡吧\瑞星\Dr)

本帖子中包含更多资源

maybe修改了一些东西。否则的话卡巴是可以脱的