无限重启病毒样本

小白鼠

无限重启病毒样本

冷冷

沙发
~~~~


[ 本帖最后由 冷冷 于 2008-3-7 12:13 编辑 ]

543217

Begin scan in 'C:\Documents and Settings\Administrator\桌面\无限重启病毒样本.rar'


End of the scan: 2008年3月7日 星期五  12:11
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

TO KL .

stonejr

难怪扫描不到，就是几个批处理文件和注册文件的自解压包。。。

wangjay1980

Hello,

########.exe_ - Trojan.BAT.Zapchast.c,
######.exe_, Explorer.reg_, RegCtrl.bat_ - Trojan.BAT.Zapchast.d

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: chongqi.rar
> Attachment: explorer.rar

tanlimo

这个强，玩笑？

Nblock

微点

Redevil

作者估计是觉得好玩

HC303

File ID  Filename  Size (Byte) Result
3785493  ########.exe  91 KB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

Filename Result  ########.exe  FALSE POSITIVE

The file '########.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates. In case AntiVir can detect this file we will not change or remove our detection.