8个马,md5内见

IllusionWing

原帖由 EQ2 于 2007-9-2 12:32 发表
只要一个themida。。。你的组合就全挂

某些报壳王直接把Themida报Malware....再说了,即便themida是vm执行,最终还是要映射到系统函数上

seamonkey

金山

ssy275

Result: 8 malware found
Trojan-Downloader.Win32.Small.fjm (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\08.exe
Trojan-Downloader.Win32.Small.fjk (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\02.exe
Trojan-Downloader.Win32.Agent.csd (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\03.exe
Trojan-PSW.Win32.OnLineGames.bko (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\04.exe
Trojan-PSW.Win32.Agent.pc (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\05.exe
Backdoor.Win32.WinterLove.bi (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\06.exe
Trojan-PSW.Win32.OnLineGames.bkq (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\07.exe
Trojan-PSW.Win32.OnLineGames.bkr (virus)
C:\Documents and Settings\ssy\×ÀÃæ\Downloads.rar\01.exe

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\Downloads.rar'
C:\Documents and Settings\tim\桌面\Downloads.rar
  [0] Archive type: RAR
  --> 08.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 02.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 03.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 04.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 05.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 06.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 07.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 01.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      A backup was created as '4751a3e2.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!