[083D20]挖掘6

显示全部楼层 · 发表于 2007-9-26 20:21:41

http://www.ip369.net/mmm/xpkk.htm
无赖办法解得

以前有人发过，好像更新了

显示全部楼层 · 发表于 2007-9-26 20:24:39

显示全部楼层 · 发表于 2007-9-26 20:26:01

可能没
detected: Trojan program Trojan-PSW.Win32.Delf.bav URL: http://bbs.kafan.cn/attachment.php?aid=132221//vip.exe//UPX

显示全部楼层 · 发表于 2007-9-26 20:29:06

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQPass.yrd

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.42.22

显示全部楼层 · 发表于 2007-9-26 20:46:10

显示全部楼层 · 发表于 2007-9-26 21:34:30

Scan performed at: 2007-9-26 21:34:06
Scanning Log
NOD32 version 2551 (20070926) NT
Command line: C:\Documents and Settings\Don johnson\桌面\vip.rar
Operating memory - is OK

Date: 26.9.2007 Time: 21:34:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\vip.rar
C:\Documents and Settings\Don johnson\桌面\vip.rar ?RAR ?vip.exe - a variant of Win32/PSW.Delf.NIY trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:34:09 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-9-26 21:46:04

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 254
Paranoia Database - 5836
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\vip.exe

C:\Documents and Settings\uhthn\Desktop\vip.exe - Suspicious of Win32.Trojan-PSW.Delf.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-26 22:47:18

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\vip.rar'
C:\Users\morgan\Documents\
  vip.rar
[0] Archive type: RAR
--> vip.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.Aim.48 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-27 13:42:06

KV2008

显示全部楼层 · 发表于 2007-9-27 13:53:10

微点砍掉

[病毒样本] [083D20]挖掘6

本帖子中包含更多资源

本帖子中包含更多资源

一样

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源