[病毒样本] 1

显示全部楼层 · 发表于 2008-2-4 01:21:20

[ 本帖最后由 tonger2003 于 2008-2-4 01:55 编辑 ]

显示全部楼层 · 发表于 2008-2-4 01:22:17

Begin scan in 'C:\Documents and Settings\Administrator\桌面\fdfdfd.rar'
C:\Documents and Settings\Administrator\桌面\fdfdfd.rar
  [0] Archive type: RAR
  --> fdfdfd.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

End of the scan: 2008年2月4日  01:22
Used time: 00:06 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-4 01:22:52

IK
I:\virus\fdfdfd.rar:\fdfdfd.exe - Suspect code-parts found (Level: 10)
I:\virus\fdfdfd.rar

      2 Files scanned
      (1 Archiv with 1 file)
      0 Signatures found
      1 Suspect code-part found
      Used time: 0:00.015
------------------------------------------
I:\virus\000fd.rar:\000fd.exe - Suspect code-parts found (Level: 10)
I:\virus\000fd.rar
2 Files scanned
(1 Archiv with 1 file)
0 Signatures found
1 Suspect code-part found
Used time: 0:00.031

[ 本帖最后由冷_冷于 2008-2-4 02:07 编辑 ]

显示全部楼层 · 发表于 2008-2-4 01:25:42

一连串的genetik

显示全部楼层 · 发表于 2008-2-4 01:26:58

跟这个毒很相似http://bbs.kafan.cn/viewthread.p ... page%3D2&page=2
行为可以说是一样的！！！
楼主加壳？

显示全部楼层 · 发表于 2008-2-4 01:28:44

没加壳直加了花

显示全部楼层 · 发表于 2008-2-4 01:32:11

原帖由 tonger2003 于 2008-2-4 01:28 发表
没加壳直加了花

这里高手云集！

显示全部楼层 · 发表于 2008-2-4 01:34:05

http://bbs.kafan.cn/viewthread.php?tid=198188&extra=page%3D1

是弄的这个样本

显示全部楼层 · 发表于 2008-2-4 01:36:27

那其实是同一个病毒！！

显示全部楼层 · 发表于 2008-2-4 01:41:59

是的哦

[病毒样本] 1

本帖子中包含更多资源

回复 8楼 tonger2003 的帖子