NOD32拦不住,微点补刀了

显示全部楼层 · 发表于 2007-9-8 20:01:27

发现文件末端加一堆废指令就会genetik

显示全部楼层 · 发表于 2007-9-8 20:01:45

补图

显示全部楼层 · 发表于 2007-9-8 20:10:49

eset好像也来这一套了, 再看看eset对Win32/Obfuscated的解答..

This is a generic name that ESET uses to apply to a variety of Windows threats using obfuscation techniques such as runtime packing, polymorphism and junk code injection

显示全部楼层 · 发表于 2007-9-8 20:12:24

genetik好像本来就是这么解答的

末段的junk code
但不知道为什么启发也会到pe头去

显示全部楼层 · 发表于 2007-9-8 20:22:00

HEUR/Malware

显示全部楼层 · 发表于 2007-9-8 20:32:40

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description SHeur.LKF
Error code: -1602
Requested URL: /attachment.php?aid=125366
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-8 22:57:36

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3938
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\MPPDS.EXE

C:\Documents and Settings\uhthn\Desktop\MPPDS.EXE - Suspicious of Trojan-PSW.OnLineGames.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] NOD32拦不住,微点补刀了

本帖子中包含更多资源

回复 11楼 promised 的帖子

回复 13楼 hj5abc 的帖子