操控磁盤的病毒

醉一生爱妍

費爾砍後門。。

樣本下載地址：garyyan456.ys168.com--樣本--NUMBER__1,rar

llgiggs

兔斯基博士一大早又起來幹活了


Begin scan in 'C:\Documents and Settings\Administrator\桌面\Number_001.rar'
C:\Documents and Settings\Administrator\桌面\Number_001.rar
  [0] Archive type: RAR
  --> Number_001.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [1] Archive type: RAR SFX (self extracting)
      --> rinst.exe
          [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      A backup was created as '480909f4.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

醉一生爱妍

原帖由 llgiggs 于 2008-1-27 12:34 发表
兔斯基博士一大早又起來幹活了


Begin scan in 'C:\Documents and Settings\Administrator\桌面\Number_001.rar'
C:\Documents and Settings\Administrator\桌面\Number_001.rar
  [0] Archive type: R ...

當然

冷冷

I:\virus\test\Number_001.exe:\rinst.exe - Signature 'Backdoor.Win32.Rbot.esp' found
I:\virus\test\Number_001.exe - Signature 'Trojan-Downloader.Win32.Banload.ams' found

        2 Files scanned
          (1 Archiv with 1 file)
        2 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.109

hj5abc

miss .

[ 本帖最后由 hj5abc 于 2008-1-27 13:48 编辑 ]

zwl2828

C:\Users\Wesley\Downloads\Number_001.rar
  [0] Archive type: RAR
  --> Number_001.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [1] Archive type: RAR SFX (self extracting)
      --> rinst.exe
          [DETECTION] Contains suspicious code HEUR/Crypted

流清泉

这个主动防御是那个软件？

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Number_001.rar'
C:\Documents and Settings\Administrator\My Documents\
  Number_001.rar
  Number_001.rar:Zone.Identifier
    [0] Archive type: RAR
    --> Number_001.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: RAR SFX (self extracting)
        --> rinst.exe
            [DETECTION] Contains suspicious code HEUR/Crypted
            [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2008年1月26日  21:30
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      0 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      2 Archives were scanned
      3 Warnings
      0 Notes

leonfg

趋势 过

will

SSM…  是个HIPS