test one

显示全部楼层 · 发表于 2008-2-19 01:43:21

红伞7

Begin scan in 'D:\病毒样本\8.vmp.rar'
D:\病毒样本\
  8.vmp.rar
[0] Archive type: RAR
--> 8.vmp.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-19 01:46:35

上报红伞
&
2008-2-19 1:45:37 Kernel File 'F:\virus\8[1].vmp.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-19 01:48:23

IK
I:\virus\February\19\8[1].vmp.rar:\8.vmp.exe - Signature 'Trojan-Downloader.Win32.Banload.ase' found
I:\virus\February\19\8[1].vmp.rar

      2 Files scanned
      (1 Archiv with 1 file)
      1 Signature found
      0 Suspect code-parts found
      Used time: 0:00.141

~~~~~~~~~~~
把百度的logo下载下来

[ 本帖最后由冷_冷于 2008-2-19 01:51 编辑 ]

显示全部楼层 · 发表于 2008-2-19 01:58:43

Win32:Virtualizer [Cryp]

显示全部楼层 · 发表于 2008-2-19 08:43:24

The file '8.vmp.exe' has been determined to be 'UNDER ANALYSIS'.

上报~

显示全部楼层 · 发表于 2008-2-19 10:00:27

红伞启发了，对未知。

显示全部楼层 · 发表于 2008-2-19 10:03:47

2008-2-19 10:03:41 Kernel File 'E:\virus\8.vmp\8.vmp.exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-19 10:04:45

无可疑的程序行为.只看到一张baidu.gif

显示全部楼层 · 发表于 2008-2-19 13:19:46

C:\Documents and Settings\VIP\桌面\8.vmp.rar>>8.vmp.exe Packer.VmpPacker.a.bfdn 可疑程序已删除/隔离

[病毒样本] test one

本帖子中包含更多资源

本帖子中包含更多资源