[ecc169b]

显示全部楼层 · 发表于 2007-9-2 15:01:05

A-Squared	Found nothing
AntiVir	Found HEUR/Crypted
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

[ 本帖最后由绅博周幸于 2007-9-2 15:02 编辑 ]

显示全部楼层 · 发表于 2007-9-2 15:01:39

？？没东西

显示全部楼层 · 发表于 2007-9-2 15:01:51

样本在哪？

显示全部楼层 · 发表于 2007-9-2 15:04:13

Starting the file scan:

Begin scan in 'F:\病毒样本\2.rar'
F:\病毒样本\2.rar
  [0] Archive type: RAR
  --> 2.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-2 15:07:54

这真不知道说啥好了

显示全部楼层 · 发表于 2007-9-2 15:12:37

themida本就是一加壳工具

显示全部楼层 · 发表于 2007-9-2 15:12:45

原帖由 小邪邪 于 2007-9-2 15:07 发表
这真不知道说啥好了

呵呵
是Themida壳
你点一下那个窗口

显示全部楼层 · 发表于 2007-9-2 15:13:28

原帖由 lsyer 于 2007-9-2 15:12 发表

呵呵
是Themida壳
你点一下那个窗口

可惜还是被周X给加死了

显示全部楼层 · 发表于 2007-9-2 15:19:31

C:\ABC\2.rar:\2.exe - 特征码 'Virus.Win32.Agent.KCP' 被发现
C:\ABC\2.rar

显示全部楼层 · 发表于 2007-9-2 15:25:44

egin scan in 'C:\Documents and Settings\tim\桌面\2.rar'
C:\Documents and Settings\tim\桌面\2.rar
  [0] Archive type: RAR
  --> 2.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Themida). Please verify the origin of the file
   [INFO]    A backup was created as '474c659b.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[ecc169b]

本帖子中包含更多资源

本帖子中包含更多资源