换了马甲,瑞星不认的病毒.

显示全部楼层 · 发表于 2008-5-20 19:42:01

McAfee MISS

显示全部楼层 · 发表于 2008-5-20 19:42:09

TO KL

Hello,

1265.exe_ - not-a-virus:AdWare.Win32.Ejik.fy

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

[:1:]

[ 本帖最后由 wangjay1980 于 2008-5-20 22:31 编辑 ]

显示全部楼层 · 发表于 2008-5-20 19:47:21

D:\firefox download\1265.rar » RAR » 1265.exe » PECompact v2.xx - is OK
D:\firefox download\1265.rar:Zone.Identifier - is OK

显示全部楼层 · 发表于 2008-5-20 19:57:33

Begin scan in 'C:\Documents and Settings\haha\桌面\1265.rar'
C:\Documents and Settings\haha\桌面\1265.rar
[NOTE] A backup was created as '4868bcd3.qua' ( QUARANTINE )

显示全部楼层 · 发表于 2008-5-20 20:07:02

创建C:\WINDOWS\SYSTEM32\RESIIFERS.INI

显示全部楼层 · 发表于 2008-5-20 20:08:10

显示全部楼层 · 发表于 2008-5-20 20:09:50

[Found security risk] <W32/BaiduBar.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\1265.rar->1265.exe

---------------------------------------------------------------------
Scan ended: 2008-5-20, 20:09:28
Duration: 0:00:02

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-20 20:10:00

信息 2008-05-20  20:09:24 您此次查毒隔离了1个文件
信息 2008-05-20  20:09:24 您此次查毒共查出1个病毒以及危险代码
信息 2008-05-20  20:09:24 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个
信息 2008-05-20  20:09:24 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-20  20:09:24 D:\Desktop\1265.rar\1265.exe Win32.Troj.RealmT.zz.458756 隔离成功

显示全部楼层 · 发表于 2008-5-20 20:15:49

呵呵，想当年瑞星还大吹大擂它的虚拟脱壳是怎么怎么强大的~~~~

现在看来。。。。

请问楼主是加了壳还是换代码？

[病毒样本] 换了马甲,瑞星不认的病毒.

本帖子中包含更多资源

死了没有？

本帖子中包含更多资源

F-Prot 4.4.4