纯正毒网一个

显示全部楼层 · 发表于 2008-2-1 19:22:14

http://js.k0102.com/a11.htm

大家玩玩

Begin scan in 'D:\病毒样本\data.rar'
D:\病毒样本\
  data.rar
  data.rar:Zone.Identifier
[0] Archive type: RAR
--> data.gif
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-1 19:24:33

Begin scan in 'C:\Documents and Settings\Administrator\桌面\data.rar'
C:\Documents and Settings\Administrator\桌面\data.rar
  [0] Archive type: RAR
  --> data.gif
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [INFO]    The file was deleted!

End of the scan: 2008年2月1日  19:24
Used time: 00:13 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

没开那网页，直接扫压缩包了

显示全部楼层 · 发表于 2008-2-1 19:25:05

进去之后世界之窗死掉了

显示全部楼层 · 发表于 2008-2-1 19:27:23

google都这麽强了

显示全部楼层 · 发表于 2008-2-1 19:27:51

FS报了3个

显示全部楼层 · 发表于 2008-2-1 19:39:44

加密水平太垃圾了
http://js.k0102.com/data.gif

显示全部楼层 · 发表于 2008-2-1 19:51:47

-> http://js.k0102.com/a11.htm - 未发现标志
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
-> src=\ - 无法访问
可雨的自动分析还有很长的路要走亚~ 呵呵

显示全部楼层 · 发表于 2008-2-1 19:56:29

来了个解密工具不够，还要来个自动帮你解密的啊？

显示全部楼层 · 发表于 2008-2-1 19:59:43

呵呵这个可雨在做
我暂时还是往手动辅助简化方向开发
毕竟还有很多的问题..

显示全部楼层 · 发表于 2008-2-1 20:45:27

C:\Documents and Settings\GUNDAM\桌面\data.rar » RAR » data.gif - a variant of Win32/Xorer virus

[已鉴定] 纯正毒网一个

回复 7楼 jimmyleo 的帖子

回复 8楼 solcroft 的帖子