【09f3c2】又一只

jimmyleo

同样是antivir拦截脚本中挖出

The EQs

Scan performed at: 2007-8-30 14:07:10
Scanning Log
NOD32 version 2491 (20070830) NT
Command line: C:\Documents and Settings\Don johnson\桌面\4433.rar
Operating memory - is OK

Date: 30.8.2007  Time: 14:07:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\4433.rar
C:\Documents and Settings\Don johnson\桌面\4433.rar ?RAR ?4433.exe ?CHM ?/mm.exe - Win32/Drowor.NAC virus - was a part of the deleted object
Number of scanned files: 16
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:07:14 Total scanning time: 0 sec (00:00:00)

啊弥陀佛

不是有效的 PE 文件

jimmyleo

4433.exe ?CHM ?/mm.exe
你也不看看…… 到底是什么……

欠妳緈諨

AVAST又说“知道”

hj5abc

这个确实不能运行,所以应该没什么危害;倒是ess解压不报,估计是监控解不了包.

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\4433.exe:<CHM>\mm.exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 1     
- scanned         : 1       -  scanned    : 2       - scanned     : 1     
- contain viruses : 0       -  infected   : 0       - infected    : 0     
- deleted         : 0       -  suspicious : 1       - suspicious  : 1     

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\4433.exe - Suspicious file

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

gho

卡巴，咖啡都不报

wazg

诺顿2008

红心王子

换汤不换药的东东
反反复复报的一直都是这个