[A969CF]挖掘5

显示全部楼层 · 发表于 2007-9-26 20:33:15

http://www.ip369.net/mmm/xpkk.htm
这个真正去解也比较浪费
于是就getElementById了

显示全部楼层 · 发表于 2007-9-26 21:41:49

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 254
Paranoia Database - 5836
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\window.exe

C:\Documents and Settings\uhthn\Desktop\window.exe - Infected with SDB:Win32.Trojan-Downloader.Delf.4 - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-26 22:46:42

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\window.rar'
C:\Users\morgan\Documents\
  window.rar
[0] Archive type: RAR
--> window.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] [A969CF]挖掘5

回复 10楼 jimmyleo 的帖子