疑似机器狗穿了sd

显示全部楼层 · 发表于 2008-3-22 09:51:42

Start of the scan: 2008年3月22日  09:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\dog.rar'
C:\Documents and Settings\Administrator\桌面\dog.rar
  [0] Archive type: RAR
  --> dog\AtiSrv.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> dog\usbhcid.sys
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-25 22:36:03

我测试过很多次，机器狗可以穿过影子系统2008破解版本和冰点。这个病毒确实厉害。

显示全部楼层 · 发表于 2008-3-26 13:35:53

检测到：木马程序 Trojan-PSW.Win32.OnLineGames.sea

显示全部楼层 · 发表于 2008-3-26 16:01:39

Starting the file scan:

Begin scan in 'C:\Documents and Settings\sanhu35\桌面\dog.rar'
C:\Documents and Settings\sanhu35\桌面\dog.rar
  [0] Archive type: RAR
--> dog\AtiSrv.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
  --> dog\usbhcid.sys
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
   [NOTE]    A backup was created as '4851034c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-3-26 16:24:45

1.加壳
2.删除启动项旧的自身
3.复制自身到启动项

显示全部楼层 · 发表于 2008-3-26 17:22:20

又是疯狗,而且最新的疯狗对打了疫苗的机器也能发起攻击

显示全部楼层 · 发表于 2008-3-30 12:10:22

很好，很强大!

显示全部楼层 · 发表于 2008-4-6 00:58:00

不错，下来研究下～

[其他相关] 疑似机器狗穿了sd