MD5: 38E64F CCF600

自由

运行了360Server.exe得到的360safe.行为改www，007788，com为主页。其他现在看不到。该上报的都上报了。卡巴，江民，金山，微点。。。呵呵。
ps:我没运行360safe

[ 本帖最后由 自由 于 2007-11-25 18:16 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\桌面.rar'
E:\桌面.rar
  [0] Archive type: RAR
  --> 360Server.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was deleted!

HC303

毒霸MISS，瑞星能杀。

Nerazzurri

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=158173 is infected with Trojan.Win32.StartPage.auc virus

promised

C:\ABC\桌面.rar
        C:\ABC\桌面.rar\360Safe.exe
>>> Virus 'Mal/Emogen-F' found in file C:\ABC\桌面.rar\360Safe.exe
        C:\ABC\桌面.rar\360Server.exe
        C:\ABC\桌面.rar\360Server.exe\FILE:0000
>>> Virus 'Mal/Emogen-F' found in file C:\ABC\桌面.rar\360Server.exe\FILE:0000
>>> Virus 'Mal/Behav-160' found in file C:\ABC\桌面.rar\360Server.exe

Please send infected samples to Sophos for analysis.
For advice consult www.sophos.com, email support@sophos.com
or telephone +44 1235 559933
Ending Sophos Anti-Virus.

capsshift

微点能报啊。

程序:
C:\BOOT\AH\360SAFE.EXE
此文件带以下驱动:
C:\WINDOWS\SYSTEM32\DRIVERS\
是否删除木马程序及其衍生物?

这玩意，用了什么延迟技术，运行后等了半天，估计是准备有动作了，一下子被微点抓出来了。

solcroft

通杀

capsshift

红伞最奇怪了，在压缩包里报了。

Begin scan in 'C:\BOOT\ah.rar'
C:\BOOT\ah.rar
  [0] Archive type: RAR
  --> 360Server.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was deleted!

解压出来，反而不报了。
Starting the file scan:

Begin scan in 'C:\BOOT\360Safe.exe'


End of the scan: 2007年11月25日  18:07
Used time: 00:03 min

The scan has been done completely.

自由

你运行360Server。提示出网你放行，看报不报？我自己电脑不报。就改主页。

[ 本帖最后由 自由 于 2007-11-25 18:17 编辑 ]

solcroft

那就说只报了360server，360safe挂了