2个 [MD5: 2277A1 E460A1]

红心王子

来午餐咯

英仔

費爾pass~~dr.web bd nod32 各一個

残缺的唯美

2007-8-25 11:49:56        Scanning Log
2007-8-25 11:49:56        Version of virus signature database: 2483 (20070824)
2007-8-25 11:49:56        Date: 25.8.2007  Time: 11:49:56
2007-8-25 11:49:56        Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\2.zip
2007-8-25 11:50:00        D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 2/lady.com » RAR » .exe » RAR » TF.exe - a variant of Win32/PSW.Lineage.ACN trojan
2007-8-25 11:50:00        D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 2/lady.com » RAR » .exe » RAR » 筿辫俱.TXT - is OK
2007-8-25 11:50:00        D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 2/lady.com » RAR » 筿辫俱.TXT - is OK
2007-8-25 11:50:00        D:\Documents and Settings\EKINCHENG\桌面\2.zip » ZIP » 2/dog.exe - is OK
2007-8-25 11:50:00        Number of scanned files: 7
2007-8-25 11:50:00        Number of threats found: 1
2007-8-25 11:50:00        Time of completion: 11:50:00  Total scanning time: 4 sec (00:00:04)

ssy275

FS PASS

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\2.zip'
F:\病毒样本\2.zip
  [0] Archive type: ZIP
    --> 2/lady.com
      [1] Archive type: RAR SFX (self extracting)
      --> ®à­±.exe
        [2] Archive type: RAR SFX (self extracting)
        --> TF.exe
            [DETECTION] Contains suspicious code HEUR/Malware
  --> 2/dog.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was deleted!

andylaw0818

蜘蛛过，小红伞也过。
新毒午餐，味道一般。

tracydk

红伞你没开高启发...

红心王子

原帖由 tracydk 于 2007-8-25 11:59 发表
红伞你没开高启发...

这个不开高启发就不报
真BT

tracydk

高启发报壳

solcroft

红伞启发出来的东西



第二个解放出来的文件名叫TF.EXE