感染型病毒

hsly109

微点don't miss

Palkia

原帖由 hsly109 于 2008-5-10 22:29 发表
微点don't miss

do not miss???

猫咪想说found nothing吧？

wjzdw

....垃圾马    用瑞星废了它~~

tanlimo

看6楼回复。

或双击执行看看。

Palkia

运行后用个对话框骗人提示压缩文件损坏~然后企图访问网络~

下载者

sam.to

Begin scan in 'C:\Documents and Settings\kato9096\桌面\样本.rar'
C:\Documents and Settings\kato9096\桌面\样本.rar
  [0] Archive type: RAR
  --> setting.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> HelpForHtml.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!


Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.

We received the following archive files:
File ID          Filename         Size (Byte)         Result
25015680          样本.rar         715.25 KB         OK

A listing of files contained inside archives alongside their results can be found below:
File ID          Filename         Size (Byte)         Result
25015681          setting.exe          340 KB          UNDER ANALYSIS
25015682          HelpForHtml.exe          2.91 MB          UNDER ANALYSIS


Please find a detailed report concerning each individual sample below:
Filename         Result
setting.exe          UNDER ANALYSIS

The file 'setting.exe' has been determined to be 'UNDER ANALYSIS'.
Filename         Result
HelpForHtml.exe          UNDER ANALYSIS

The file 'HelpForHtml.exe' has been determined to be 'UNDER ANALYSIS'.
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

[ 本帖最后由 kato9096 于 2008-5-11 00:33 编辑 ]

molianwang

[fly]这个病毒比小浩还厉害,呵呵.[/fly]

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\HELPFORHTML.EXE
病毒程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\IWBSJ0B.EXE
2) C:\WINDOWS\SYSTEM32\3YEMLBPNPC.EXE
3) C:\WINDOWS\SYSTEM32\H33MS4CQZ.COM
是否删除病毒程序及其衍生物?

衍生的79OXQD怎么没杀
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.KAFAN\桌面\SETTING.EXE
病毒程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\VN6M67U1W.EXE
2) C:\WINDOWS\SYSTEM32\9O4C0QONH3ZR.EXE
3) C:\WINDOWS\SYSTEM32\T8RE2HKGR.COM
是否删除病毒程序及其衍生物?

konbini

EAV,金山,安铁诺都无视,蜘蛛报了

醉一生爱妍

BD miss