还有一个挂的不少

显示全部楼层 · 发表于 2007-7-13 10:09:46

搞笑Ikarus

脱-->Backdoor.Win32.Bifrose.DF
再脱-->Trojan-PWS.Win32.Agent.iu
继续脱-->Backdoor.Win32.Hupigon.btl

显示全部楼层 · 发表于 2007-7-13 11:41:11

Thank you for your submission.

Analysis ID: 3865093

File Name          Findings                      Detection                   Type       Extra
--------------------|------------------------------|----------------------------|------------|-----
syses.exe          |heuristic detection          |new malware.dq             |Trojan    |no

heuristic detection [syses.exe]

显示全部楼层 · 发表于 2007-7-13 11:42:32

显示全部楼层 · 发表于 2007-7-13 11:45:53

哪里一脱再脱了……

显示全部楼层 · 发表于 2007-7-13 13:03:02

发过

显示全部楼层 · 发表于 2007-7-13 13:09:07

NVCOD On Demand Scanner 5.80.02
NSE revision 5.90.37
nvcbin.def revision 5.90.00 of 2007/05/24 17:29:41 (794383 variants)
nvcmacro.def revision 5.90.00 of 2007/05/24 17:15:53 (20339 variants)
Total number of variants: 814722
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODB82D.tmp"
===================================================================================================
   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning drive: D:\
- Scanning system areas of drive: D:\
- Scanning files matching: D:\virus\doggin.rar
   31 ms D:\virus\doggin.rar
      0 ms D:\virus\doggin.rar:Zone.Identifier
===================================================================================================
The scanning started: 2007/07/13 13:05:10
            ended: 2007/07/13 13:05:10
Logged on as       : Jason
on hostname       : JASON-PC
Scanning results:
Total number of files found..............................:    2
Number of files scanned..................................:    2
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    0
Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-7-15 14:00:45

朋友给我传来一个什么刷QQ贵族的软件，运行之后，NOD32最新的没有任何反应，
syses.exe
反倒这个进程被Zonealarm截获，被我阻止了

显示全部楼层 · 发表于 2007-7-15 15:53:41

NOD32 pass

显示全部楼层 · 发表于 2007-7-15 17:03:37

我的Mcafee什么也没查出来

显示全部楼层 · 发表于 2007-7-15 17:07:29

[病毒样本] 还有一个挂的不少

本帖子中包含更多资源

回复 #11 tonylee 的帖子

Norton依然挂

本帖子中包含更多资源

[病毒样本] 还有一个 挂的不少

本帖子中包含更多资源

回复 #11 tonylee 的帖子

Norton依然挂

本帖子中包含更多资源

[病毒样本] 还有一个挂的不少