晚餐时间,上传1个给大家试试...

显示全部楼层 · 发表于 2008-4-14 18:06:42

http://www.virustotal.com/zh-tw/analisis/3d0a23551d8f8fd36ba647bce753a3f1

显示全部楼层 · 发表于 2008-4-14 18:24:14

毒霸查不出

显示全部楼层 · 发表于 2008-4-14 18:32:03

Begin scan in 'C:\Documents and Settings\haha\桌面\Bredect.rar'
C:\Documents and Settings\haha\桌面\Bredect.rar
  [0] Archive type: RAR
  --> Bredect.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [INFO]    A backup was created as '48683342.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-4-14 18:40:19

rs miss

显示全部楼层 · 发表于 2008-4-14 18:41:43

Bredect.exe
md5:D0F39282A659FAB301147DB9FD769B99
UPX 0.89.6 - 1.02 / 1.05 - 1.22 (Delphi) stub -> Markus & Lazlo <===> 支持脱该壳

捆绑后是这样的我把名字改成qq了
点击运行，文件就释放在system32，可疑
   D
      └─WINDOWS
         └─system32
                  uJE7UyuE.exe

[ 本帖最后由冷冷于 2008-4-14 20:58 编辑 ]

显示全部楼层 · 发表于 2008-4-14 18:52:24

toavg

显示全部楼层 · 发表于 2008-4-14 19:33:45

晕，试试

显示全部楼层 · 发表于 2008-4-14 19:56:45

rising20.40.01未杀！

显示全部楼层 · 发表于 2008-4-14 23:33:53

Hello,

Bredect.exe_ - Constructor.Win32.Binder.bc

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: Bredect.rar
收藏

显示全部楼层 · 发表于 2008-4-14 23:38:14

看图说话

[病毒样本] 晚餐时间,上传1个给大家试试...

本帖子中包含更多资源

本帖子中包含更多资源

5/0

本帖子中包含更多资源