继续加壳82cefe

显示全部楼层 · 发表于 2007-7-27 16:49:46

卡巴啊

显示全部楼层 · 发表于 2007-7-27 16:51:26

Scan performed at: 2007-7-27 16:51:12
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: C:\Documents and Settings\Administrator\桌面\packed_20.rar

Date: 27.7.2007 Time: 16:51:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\packed_20.rar
C:\Documents and Settings\Administrator\桌面\packed_20.rar ?RAR ?packed_20.exe - Win32/TrojanDropper.Rime.Gen trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:51:14 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-27 16:54:32

微点拦截

显示全部楼层 · 发表于 2007-7-27 16:56:15

同一个行为
生成物都是一样的
壳又多了

显示全部楼层 · 发表于 2007-7-27 17:10:51

nod

Scan performed at: 2007-7-27 17:10:21
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: C:\Documents and Settings\Kevin\Desktop\病毒样本\packed_20.rar

Date: 27.7.2007 Time: 17:10:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Kevin\Desktop\病毒样本\packed_20.rar
C:\Documents and Settings\Kevin\Desktop\病毒样本\packed_20.rar ?RAR ?packed_20.exe - Win32/TrojanDropper.Rime.Gen trojan
Number of scanned files: 1
Number of threats found: 1
Time of completion: 17:10:24 Total scanning time: 1 sec (00:00:01)

avira pass...

显示全部楼层 · 发表于 2007-7-27 17:13:40

F:\packed_20.rar\packed_20.exe - infected with Trojan.Inject.251

DRWEB 4.33 报已知木马

[ 本帖最后由 wangfeng66 于 2007-7-27 17:15 编辑 ]

显示全部楼层 · 发表于 2007-7-27 17:15:01

红伞，上报。

显示全部楼层 · 发表于 2007-7-27 17:16:59

nod32杀了

显示全部楼层 · 发表于 2007-7-27 17:19:33

KV杀
小红伞竟然挂了

显示全部楼层 · 发表于 2007-7-27 17:23:01

金山报,费尔报木马Trojan.Startpage.后面忘记了

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PACKED_20.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DRIVERS\SVCHOST.EXE
是否删除木马程序及其衍生物?

[病毒样本] 继续加壳82cefe

本帖子中包含更多资源

浏览过的版块