csrss.jpg [md5:5ef4c42]

显示全部楼层 · 发表于 2008-5-27 07:49:18

你看你看，俄罗斯那家拿不到样本就XX了吧

File:	csrss.jpg
Status:	INFECTED/MALWARE
MD5:	5ef4c42fab661deea92486f8351b923b
Packers detected:	PE_PATCH, TELOCK

Scanner results
Scan taken on 26 May 2008 23:46:45 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.CFI.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Spy.Agent.NPM
ClamAV	Found PUA.Packed.TeLock
CPsecure	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Ikarus	Found Trojan-Downloader.Win32.Banload.auf
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-223
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-27 07:51:41

金山毒霸 0

一定会有人说人家还有 PDM 的

显示全部楼层 · 发表于 2008-5-27 07:57:35

对我来说，我宁可教那群小白怎么自己从新装系统也不乐意教他们怎么用那PDM或者hips

显示全部楼层 · 发表于 2008-5-27 08:47:41

Test\
  csrss.rar
[0] Archive type: RAR
--> csrss.jpg
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [NOTE]    The file was moved to '48ad5a99.qua'!

显示全部楼层 · 发表于 2008-5-27 09:23:17

coopen_setup_100047[1].exe。。。

显示全部楼层 · 发表于 2008-5-27 20:25:59

我都觉得该付费上报样本了。

显示全部楼层 · 发表于 2008-5-27 20:27:25

RS20.46.12未杀！

[病毒样本] csrss.jpg [md5:5ef4c42]

本帖子中包含更多资源

回复 2楼挪威的冬天的帖子

ArcaVir2008, F-Prot 4.4.4

3/0

浏览过的版块

[病毒样本] csrss.jpg [md5:5ef4c42]

本帖子中包含更多资源

回复 2楼 挪威的冬天 的帖子

ArcaVir2008, F-Prot 4.4.4

3/0

浏览过的版块

回复 2楼挪威的冬天的帖子