老毒复合加壳892696

显示全部楼层 · 发表于 2007-7-27 16:17:46

红伞啊

显示全部楼层 · 发表于 2007-7-27 16:19:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\20.rar'
C:\Documents and Settings\Administrator\桌面\
  20.rar
[0] Archive type: RAR
--> 20.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46d7aaa4.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-27 16:20:04

Scan performed at: 2007-7-27 16:19:53
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: C:\Documents and Settings\Administrator\桌面\20.rar

Date: 27.7.2007 Time: 16:19:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\20.rar
C:\Documents and Settings\Administrator\桌面\20.rar ?RAR ?20.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:19:59 Total scanning time: 4 sec (00:00:04)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-7-27 16:21:01

DR 脱了,报鸽子.

[ 本帖最后由 scottxzt 于 2007-7-27 16:22 编辑 ]

显示全部楼层 · 发表于 2007-7-27 16:22:17

sav过掉…………

显示全部楼层 · 发表于 2007-7-27 16:23:39

antivir怎么了……不是说是壳了么……

显示全部楼层 · 发表于 2007-7-27 16:24:13

金山报一个,费尔报后门

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\20.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DRIVERS\SVCHOST.EXE
是否删除木马程序及其衍生物?
但是漏了很多衍生物,这是他们的BUG,在后面的版本中会改进的.我上报

显示全部楼层 · 发表于 2007-7-27 16:25:43

不知道LZ想表达什么？？？？

显示全部楼层 · 发表于 2007-7-27 16:28:37

复合加壳得毒很少见

显示全部楼层 · 发表于 2007-7-27 16:29:55

不少见了。。。很常见

[病毒样本] 老毒复合加壳892696

本帖子中包含更多资源

回复 #1 qwerasdf123 的帖子

回复 #9 woai_jolin 的帖子

浏览过的版块