查看: 2035|回复: 8
收起左侧

[病毒样本] 没文件名的一个 麻烦问下怎么能没文件名 谢谢

[复制链接]
death1616
发表于 2008-5-11 20:51:22 | 显示全部楼层 |阅读模式
没文件名的一个 麻烦问下怎么能没文件名 谢谢

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
allinwonderi
发表于 2008-5-11 20:53:00 | 显示全部楼层
木马吧?ArcaVir,FP 6 miss.
Exia 该用户已被删除
发表于 2008-5-11 20:54:56 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\AV\.exe.rar'
E:\AV\.exe.rar
  [0] Archive type: RAR
    --> .exe
          [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
wangjay1980
发表于 2008-5-11 21:12:02 | 显示全部楼层
K

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
qianwenxiang
发表于 2008-5-11 21:19:27 | 显示全部楼层
文件可以没有文件名,没有文件名的同时必须要有扩展名,据说此时它的名字就是一个nullchar+扩展名;

do like this,vb做个例子
Private Sub Form_Load()
Open "c:\.exe" For Append As #1
Print #1, "asdasd"
Close #1
End Sub


or
文件可以没有扩展名,没有扩展名的同时必须要有文件名,据说此时它的名字就是文件名+nullchar;

do like this
Private Sub Form_Load()
Open "c:\123" For Append As #1
Print #1, "asdasd"
Close #1
End Sub
冷冷
发表于 2008-5-11 22:29:18 | 显示全部楼层
红心王子
发表于 2008-5-11 22:57:56 | 显示全部楼层
1210517861,2008-5-11 22:57:41,TrojanDownloader.Agent.aamj.epvx,木马,Administrator,C:\Documents and Settings\Administrator\桌面\.exe.rar>>.exe,Manual scan
mofunzone
发表于 2008-5-12 00:33:38 | 显示全部楼层

回复 6楼 冷冷 的帖子

只有1-10有效
Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\js10.exe'
C:\TDDOWNLOAD\
  js10.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js1.exe'
C:\TDDOWNLOAD\
  js1.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js2.exe'
C:\TDDOWNLOAD\
  js2.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Steal.44657
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js3.exe'
C:\TDDOWNLOAD\
  js3.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js4.exe'
C:\TDDOWNLOAD\
  js4.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js5.exe'
C:\TDDOWNLOAD\
  js5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js6.exe'
C:\TDDOWNLOAD\
  js6.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js7.exe'
C:\TDDOWNLOAD\
  js7.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js8.exe'
C:\TDDOWNLOAD\
  js8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\js9.exe'
C:\TDDOWNLOAD\
  js9.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: RSRC
          --> Object
          --> Object
          --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月11日  09:33
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     10 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      1 Warnings
     10 Notes
电影结束了
发表于 2008-5-12 07:11:43 | 显示全部楼层
TF的默认对下载的判断开始好转了....

[ 本帖最后由 电影结束了 于 2008-5-12 07:12 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-29 02:28 , Processed in 0.129979 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表