不知道是什么！大家扫扫看~~~

csliss

fs報

电影结束了

原帖由 dbpe 于 2008-6-6 16:18 发表



以前分析过


在windows下生成****temp  里面全是 *.bmp   其实是exe

运行然后.................

你啥系统。。。
还能运行。。。？？？

电影结束了

Submission Summary:

• Submission details:
  • Submission received: 6 June 2008, 21:14:50
  • Processing time: 4 min 1 sec
  • Submitted sample:
    • File MD5: 0xA233B6FB5B69A01E4DB0B25F65AD98C2
    • Filesize: 7,766 bytes

• Summary of the findings:

What's been found	Severity Level
Packed with a packer that is known to be used by malware (e.g. to complicate threat analysis or detection).

Technical Details:

File System Modifications

• The following file was created in the system:

#	Filename(s)	File Size	File MD5
1	[file and pathname of the sample #1]	7,766 bytes	0xA233B6FB5B69A01E4DB0B25F65AD98C2

Memory Modifications

• There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	139,264 bytes

allinwonderi

MISS

allinwonderi

[Found possible security risk]         <W32/Heuristic-CSU!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\orz.rar->orz.exe

---------------------------------------------------------------------
Scan ended:        2008-6-6, 19:55:51
Duration:        0:00:00

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

qigang

RS20.47.42未杀！

已坏死！