今天还是 FTP（今天一共3个，第一个）

Cloud018

今天还是 FTP（今天一共3个，第一个）

Cloud018

这个 FTP 的权限是完全开放
我已经把 FTP 上的马换成我的马了...晕

红心王子

红伞开了高启发
过了

FBAV

过了……

wangjay1980

服了它，这样还活着

2007-8-25 JAY12:30:37        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX        packed file UPX       
2007-8-25 JAY12:30:37        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//UPX        ok        scanned
2007-8-25 JAY12:30:39        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        packed file PE_Patch.UPX       
2007-8-25 JAY12:30:39        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        packed file UPX       
2007-8-25 JAY12:30:39        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX//UPX        ok        scanned
2007-8-25 JAY12:30:39        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        ok        scanned
2007-8-25 JAY12:30:39        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        ok        scanned
2007-8-25 JAY12:30:40        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        packed file PE_Patch.UPX       
2007-8-25 JAY12:30:40        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        packed file UPX       
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX//UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        packed file PE_Patch.UPX       
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        packed file UPX       
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX//UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        packed file PE_Patch.UPX       
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        packed file UPX       
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX//UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#//PE_Patch.UPX        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        ok        scanned
2007-8-25 JAY12:30:41        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX//#        ok        scanned
2007-8-25 JAY12:30:42        File: C:\Documents and Settings\Owner\×ÀÃæ\piaoyao.exe//PE_Patch.UPX        ok        scanned

碧水寒潭

红伞飘了

hj5abc

第一包依然无视;
第二包一个大鸽子包..

今取现在

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2007.8.25.0 2007.08.24 -
AntiVir 7.4.1.63 2007.08.24 -
Authentium 4.93.8 2007.08.24 -
Avast 4.7.1029.0 2007.08.25 -
AVG 7.5.0.484 2007.08.24 -
BitDefender 7.2 2007.08.25 -
CAT-QuickHeal 9.00 2007.08.25 -
ClamAV 0.91 2007.08.24 -
DrWeb 4.33 2007.08.25 -
eSafe 7.0.15.0 2007.08.23 suspicious Trojan/Worm
eTrust-Vet 31.1.5085 2007.08.24 -
Ewido 4.0 2007.08.24 -
FileAdvisor 1 2007.08.25 -
Fortinet 2.91.0.0 2007.08.25 -
F-Prot 4.3.2.48 2007.08.24 -
F-Secure 6.70.13030.0 2007.08.24 -
Ikarus T3.1.1.12 2007.08.25 -
Kaspersky 4.0.2.24 2007.08.25 -
McAfee 5105 2007.08.24 -
Microsoft 1.2803 2007.08.25 -
NOD32v2 2483 2007.08.24 -
Norman 5.80.02 2007.08.24 -
Panda 9.0.0.4 2007.08.24 -
Prevx1 V2 2007.08.25 -
Rising 19.37.42.00 2007.08.24 -
Sophos 4.21.0 2007.08.25 -
Sunbelt 2.2.907.0 2007.08.25 -
Symantec 10 2007.08.25 -
TheHacker 6.1.8.172 2007.08.25 -
VBA32 3.12.2.3 2007.08.24 -
VirusBuster 4.3.26:9 2007.08.24 -
Webwasher-Gateway 6.0.1 2007.08.25 Win32.ModifiedUPX.gen!84 (suspicious)

只有2个报

wazg

费尔报第一个：wscript.shell.run.cmd

The EQs

Webwasher连UPX都报。。。。