1ge~

显示全部楼层 · 发表于 2008-2-8 21:21:19

Starting the file scan:
Begin scan in 'C:\Documents and Settings\Administrator\桌面\0jkj\1.rar'
C:\Documents and Settings\Administrator\桌面\0jkj\1.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-8 21:22:53

上报antivir~

显示全部楼层 · 发表于 2008-2-8 21:25:43

加库……

[ 本帖最后由 FBAV 于 2008-2-8 21:26 编辑 ]

显示全部楼层 · 发表于 2008-2-8 21:26:44

原帖由 Graybird 于 2008-2-8 21:22 发表
上报antivir~

红伞杀了
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrato\桌面\1.rar'
C:\Documents and Settings\Administrato\桌面\1.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

End of the scan: 2008年2月8日  21:26
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-8 21:28:48

原样本
http://bbs.kafan.cn/viewthread.php?tid=200088&extra=page%3D1
本人重新加了壳的~

大家快上报！！！

显示全部楼层 · 发表于 2008-2-8 21:29:14

deleted: Worm.Win32.AutoRun.clh

显示全部楼层 · 发表于 2008-2-8 21:32:08

Yoda

加壳前后都一样

[ 本帖最后由 wangjay1980 于 2008-2-8 21:40 编辑 ]

显示全部楼层 · 发表于 2008-2-8 21:46:13

F:\virus\1(2).rar » RAR » 1.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-2-8 21:46:45

金山全 miss

显示全部楼层 · 发表于 2008-2-8 21:48:14

启发报的……上报分析

[病毒样本] 1ge~

本帖子中包含更多资源

回复 4楼 dd2006 的帖子