楼主: julia跺跺
收起左侧

[可疑文件] 帮忙分析一下哈~这个有木有毒的?

[复制链接]
Nocria
发表于 2012-3-31 13:04:41 | 显示全部楼层
julia跺跺 发表于 2012-3-31 12:59
好高级的病毒。反虚拟机啊。

还是第一次碰见呢
julia跺跺
 楼主| 发表于 2012-3-31 13:05:31 | 显示全部楼层
humanlwj52 发表于 2012-3-31 13:04
还是第一次碰见呢

不用谢我的
蝉鸣时
发表于 2012-3-31 13:09:42 | 显示全部楼层
humanlwj52 发表于 2012-3-31 12:52
访问被拒绝!


这个是网盘地址被ESET加入了黑名单,不一定代表文件有毒。
yhjtj
发表于 2012-3-31 13:11:51 | 显示全部楼层
反沙盘,提示和上面一样,但不反360沙箱

模块 抽奖挂9.vmp.exe (pid=5952)
试图远程注入DLL到进程 <pid=3920>(没有具体进程,也许是游戏进程?我没有这个游戏)
类型: 36
高级信息: 13,2,3920
允许这个可疑的动作吗?
julia跺跺
 楼主| 发表于 2012-3-31 13:13:09 | 显示全部楼层
yhjtj 发表于 2012-3-31 13:11
反沙盘,提示和上面一样,但不反360沙箱

模块 抽奖挂9.vmp.exe (pid=5952)

是QQ炫舞。
除了这个动作,没别的了?
留侯
发表于 2012-3-31 13:21:09 | 显示全部楼层
大蜘蛛Clean,文件加了壳:
抽奖挂9.vmp.exe - packed by PESTUB
抽奖挂9.vmp.exe - packed by FLY-CODE
抽奖挂9.vmp.exe - packed by VMPROTECT
郑伟用户
发表于 2012-3-31 13:22:08 | 显示全部楼层



2012-03-31 13:19:24 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe加载库文件C:\Windows\System32\rasapi32.dll C:\Windows\System32\rasapi32.dll
2012-03-31 13:19:24 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe加载库文件C:\Windows\System32\rasapi32.dll C:\Windows\System32\rasapi32.dll
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\SogouInput HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\SogouInput
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\SogouInput.user HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\SogouInput.user
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\SogouInput.user HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\SogouInput.user
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建文件C:\Users\zhengweios\AppData\Local\Temp\12576ca.tmp C:\Users\zhengweios\AppData\Local\Temp\12576ca.tmp
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12576ca.tmp C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12576ca.tmp
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12577c5.tmp C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12577c5.tmp
2012-03-31 13:19:25 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12577d5.tmp C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Temp\12577d5.tmp
2012-03-31 13:19:26 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
2012-03-31 13:19:26 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写文件C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\KSafeBox\21A1B40E\Users\zhengweios\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASAPI32
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS HKEY_LOCAL_MACHINE\SOFTWARE\kingsoft\KSBReg\21A1B40E\HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\抽奖挂9_RASMANCS
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:27 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:19:30 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe写注册表HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap HKEY_USERS\S-1-5-21-3241717337-2117985194-675968284-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
2012-03-31 13:20:55 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe创建注册表键值HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
2012-03-31 13:21:04 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe结束进程C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
yhjtj
发表于 2012-3-31 13:22:55 | 显示全部楼层
julia跺跺 发表于 2012-3-31 13:13
是QQ炫舞。
除了这个动作,没别的了?

我没有游戏,所以只有这些了
如果有游戏,可能还会报其他的
如果注入游戏后,游戏连接其他非游戏服务器ip,或者外{过}{滤}挂本身联网,那就不正常了,应该是传送密码
你可以装一个hips看看,md不错,4d齐全
julia跺跺
 楼主| 发表于 2012-3-31 13:23:12 | 显示全部楼层
郑伟用户 发表于 2012-3-31 13:22
2012-03-31 13:19:24 C:\Users\zhengweios\Desktop\测试\抽奖挂9.vmp\抽奖挂9.vmp.exe加载库文件C:\W ...

看了半天。没懂
看这么跺动作,是有危害的吧?
郑伟用户
发表于 2012-3-31 13:25:29 | 显示全部楼层
julia跺跺 发表于 2012-3-31 13:23
看了半天。没懂
看这么跺动作,是有危害的吧?

应该没问题吧
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-9-25 08:41 , Processed in 0.083791 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表