艳照附属品

langzi1

全部伪装成图片图标

样本太大，无法上传。郁闷
放到这里来了http://mail.qq.com/cgi-bin/exs_download?uin=859243146&svrid=32&fid=bf138ea8f94d4c724bbf5e1b46c1710d84877383c1ac5a5a&&txf_fid=&&txf_sid=&code=c598d235&k=12f36f337567d17f283b8423346337323362626675273e620b746c313931306476514f17715c545706434f115413

[ 本帖最后由 langzi1 于 2008-2-11 16:13 编辑 ]

tanlimo

分割上传

juijui

等你上傳喔~

冷冷

建议用 纳米盘 ：http://www.namipan.com/

Graybird

Starting the file scan:

Begin scan in 'E:\virus\New Folder.rar'
E:\virus\New Folder.rar
  [0] Archive type: RAR
    --> New Folder\32rf24gf3523r23fd23d.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\fd92h7gd72y6g76gfq7d6g76ted712tg.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\ghfuiyg27g27gf7gd72t372d8f276.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\hu7dh817hd87h28edhqhsd981.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\i732g8dg72fd7ytq8w7d32f2.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\luydguqg27d61g7dyg7q.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\wbyudg726gd7ygaq7wdf71d12d.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> New Folder\ÑÞÃÇÕÕ¸üÐÂÂÛ̳µØÖ·````````````````````````.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!

The file '32rf24gf3523r23fd23d.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'fd92h7gd72y6g76gfq7d6g76ted712tg.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'ghfuiyg27g27gf7gd72t372d8f276.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'hu7dh817hd87h28edhqhsd981.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'i732g8dg72fd7ytq8w7d32f2.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'luydguqg27d61g7dyg7q.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'wbyudg726gd7ygaq7wdf71d12d.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IH. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file '##################````````````````````````.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Agent.IK. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Graybird 于 2008-2-11 17:22 编辑 ]

woai_jolin

2008-2-11 16:27:08 Real-time file system protection file C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\IXP000.TMP\2.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Sandbox\Administrator\DefaultBox\drive\G\v\New Folder\1.exe.


其实就一个病毒

[ 本帖最后由 woai_jolin 于 2008-2-11 16:28 编辑 ]

shenrenrenren

无聊帮个忙，大半年没来了。

[ 本帖最后由 shenrenrenren 于 2008-2-11 16:32 编辑 ]

sam.to

卡巴一个都不报，上报

wangjay1980

detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\2.rar/2.exe//SimplePack//PE_Patch.MaskPE

juijui

原帖由 Graybird 于 2008-2-11 16:18 发表
Starting the file scan:

Begin scan in 'E:\virus\New Folder.rar'
E:\virus\New Folder.rar
  [0] Archive type: RAR
    --> New Folder\32rf24gf3523r23fd23d.exe
      [1] Archive type: RAR SFX (self ...

紅傘全殺~