实验中的技术（更新至3.5）

FBAV

好像有一个关闭命令可以
输Help看看

IllusionWing

..终于报了
还害我复制了一份文本到语音的库.....VITA啥时候有这功能了...

回前任LS的
CMD是搞不定这么多的，双进程守护倒是很好做得..

[ 本帖最后由 gankeyu 于 2008-2-2 22:37 编辑 ]

FBAV

上半年都没管Vita
一直关心股票 弄指标公式……

FBAV

可以升级拉……

jehovah_king

我除了qbasic不会编程

sas311

有机会再试

jehovah_king

原帖由 gankeyu 于 2008-2-2 21:50 发表
avast!报Hupigon-EA
卡巴无视
dr.web不认识
红伞支持片断脱壳..无视
vita无视
凝逸无视
作为UG的作者。。。
UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.9.0
HC0.rlb = 4.2.0
HC2.rlb = ...

想不到你居然把我的bat报了
小心造成误报太多，客户找你有意见
那个bat文件其实没什么特别的指令

ALEXBLAIR

原帖由 jehovah_king 于 2008-2-2 22:32 发表
报了的只是衍生物，删了还会生成
只能把cmd关了才行（理论）
还不会给cmd写双守护进程
高手教教我

干了 比较恶毒的事情

1. 
   
2. Hello,
   
3. virus3.0.exe_ - Trojan-Dropper.BAT.Agent.n
   
4. New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.
   
5. Please quote all when answering.
   
6. --
   
7. Best regards, Alexander Romanenko
   
8. Virus analyst, Kaspersky Lab.
   
9. e-mail: newvirus@kaspersky.com
   
10. http://www.kaspersky.com/
    
11. http://www.kaspersky.com/virusscanner - free online virus scanner.
    
12. http://www.kaspersky.com/helpdesk.html - technical support.
    
13. 
    
14. > Attachment: virus3.0.zip
    
15. 
    

复制代码

jehovah_king

果然不出我所料，卡巴把那个bat文件列为了病毒
于是，现在生成所谓的病毒就太容易了

一下子可以生成一批


Hello,

1.bat_ - Trojan-Dropper.BAT.Agent.o,
2.bat_ - Trojan-Dropper.BAT.Agent.p

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

3.bat_ - Trojan-Dropper.BAT.Agent.n

This file is already detected and should be detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 2.rar

>  my kav7 said one of them is a virus while the other two are not
>  but in fact they are of the same kind ----created by a software which is used to seperate files---and i add some info in the end of the file
>
>
>   this kind of detection can cause a lot of false alarm

jehovah_king

刚发现在那个bat第一行加一段cls又免杀了