Yoddos，hxxp://www.1868.tv/ads/5tDS802.jpg

显示全部楼层 · 发表于 2011-11-11 19:01:52

三生缘石发表于 2011-11-11 18:54
好吧

你上报是对的可能我才看见里面是2个文件让那边检测下然后我关注会不会入库

显示全部楼层 · 发表于 2011-11-11 19:13:36

显示全部楼层 · 发表于 2011-11-11 19:52:35

红伞kill

显示全部楼层 · 发表于 2011-11-12 10:11:44

文件加了壳，大蜘蛛：
5tDS802.exe - packed by NSPACK
5tDS802.exe - packed by UPX
5tDS802.exe - packed by PESTUB
5tDS802.exe is BINARYRES container
5tDS802.exe\data001 - packed by XOREXE
5tDS802.exe\data001 - infected with BackDoor.Darkshell.246

WinHe802.exe - packed by NSPACK
WinHe802.exe - packed by UPX
WinHe802.exe - packed by PESTUB
WinHe802.exe is BINARYRES container
WinHe802.exe\data001 - packed by XOREXE
WinHe802.exe\data001 - infected with BackDoor.Darkshell.246

[病毒样本] Yoddos，hxxp://www.1868.tv/ads/5tDS802.jpg

本帖子中包含更多资源

浏览过的版块