盗QQ，卡7不报

显示全部楼层 · 发表于 2007-7-8 20:33:12

大家看看

显示全部楼层 · 发表于 2007-7-8 20:36:24

生成器一个
生成病毒如下

显示全部楼层 · 发表于 2007-7-8 20:36:45

c:\ABC\MM.rar:\MM.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
c:\ABC\MM.rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.031

显示全部楼层 · 发表于 2007-7-8 20:40:17

不报

显示全部楼层 · 发表于 2007-7-8 20:42:51

Scan performed at: 2007-7-8 20:42:36
Scanning Log
NOD32 version 2384 (20070708) NT
Command line: C:\Documents and Settings\EQ2\桌面\MM.rar
Operating memory - is OK

Date: 8.7.2007 Time: 20:42:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\MM.rar
C:\Documents and Settings\EQ2\桌面\MM.rar ?RAR ?MM.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:42:45 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-8 20:49:04

生成的病毒KIS7报启发
已经隔离: 病毒 Downloader (变种) 文件: D:\Downloads\MM.rar/MM.exe//UPack

显示全部楼层 · 发表于 2007-7-8 20:50:57

显示全部楼层 · 发表于 2007-7-8 21:00:26

genetik..好强的特征码.

显示全部楼层 · 发表于 2007-7-8 21:00:34

费尔杀。

显示全部楼层 · 发表于 2007-7-8 21:02:30

看红伞.....
Start of the scan: 2007年7月8日  21:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\MM.rar'
C:\Documents and Settings\Administrator\桌面\MM.rar
  [0] Archive type: RAR
  --> MM.exe
   [DETECTION] Contains signature of the worm WORM/Viking.Iq
   [INFO]    A backup was created as '46bee0b1.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] 盗QQ，卡7不报

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 #5 EQ2 的帖子