过红伞 还带数字签名[MD5: 2D3F03]

godeye

这个厉害的过了红伞还不说,附加数字签名,用IE的就惨了....时间戳是10月6号的
这个5bao.net胆子够大的...
已上报勿重复.

The EQs

godeye

沙发自己坐

We received the following archive files:



File ID  Filename  Size (Byte) Result 
1330227  virus.rar 13.16 KB OK 

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result 
1329269  bf[1].exe  14.02 KB  UNDER ANALYSIS 


Please find a detailed report concerning each individual sample below:

 Filename Result 
 bf[1].exe  UNDER ANALYSIS 

The file 'bf[1].exe' has been determined to be 'UNDER ANALYSIS'. 

wangfeng66

C:\virus.rar\virus\bf[1].exe - infected with Trojan.DownLoader.origin

Archive contains an infected item


DRWEB 4.44

mofunzone

什么乱七八糟的，自己不开高启发
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\virus.rar'
C:\Users\morgan\Documents\
  virus.rar
    [0] Archive type: RAR
    --> virus\bf[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

capsshift

这个，红伞启发是要报的。
Start of the scan: 2007年10月9日  14:11

Starting the file scan:

Begin scan in 'C:\BOOT\virus.rar'
C:\BOOT\virus.rar
  [0] Archive type: RAR
  --> virus\bf[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '477d1bea.qua'!


楼主，建议去看看晓月的教程，然后再发过红伞的。

godeye

嗯嗯 高启发  大家都去用IKARUS算了

qwerasdf123

红伞启发报
不用高启发，为什么用红伞？

killloop

江民0个

googlehack

是病毒么？


这可不好说。