[病毒样本] 2

显示全部楼层 · 发表于 2008-6-26 15:03:42

to kl

显示全部楼层 · 发表于 2008-6-26 15:10:18

母体呢

显示全部楼层 · 发表于 2008-6-26 15:11:48

卡巴干了....

显示全部楼层 · 发表于 2008-6-26 15:12:33

avast 1
kv 08 0

显示全部楼层 · 发表于 2008-6-26 15:43:55

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1.rar'
C:\Documents and Settings\morgan\My Documents\
  1.rar
[0] Archive type: RAR
--> system32\klif.sys
   --> system32\xcvaver0.dll
      [1] Archive type: RSRC
      --> Object
   [WARNING] The file was ignored!
  1.rar:Zone.Identifier

End of the scan: 2008年6月26日  00:43
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-6-26 15:47:27

klif.sys不是卡巴自己的文件么

显示全部楼层 · 发表于 2008-6-26 15:54:13

原帖由 palfan 于 2008-6-26 15:47 发表
klif.sys不是卡巴自己的文件么

饿...被修改过的了...
854167a8a1c7300282ee5e157c3e1fbe 卡巴原文件
eab2f7ed415f492048fd089e4824a835 现文件

显示全部楼层 · 发表于 2008-6-26 15:58:48

也就是说卡巴已经被废掉了

显示全部楼层 · 发表于 2008-6-26 16:15:08

klif.sys
这文件有啥用

在以drivers里的....

显示全部楼层 · 发表于 2008-6-26 16:24:16

[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\1.rar->system32\xcvaver0.dll

---------------------------------------------------------------------
Scan ended: 2008-6-26, 16:23:47
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 2

本帖子中包含更多资源

回复 7楼电影结束了的帖子

F-Prot 4.4.4

浏览过的版块

[病毒样本] 2

本帖子中包含更多资源

回复 7楼 电影结束了 的帖子

F-Prot 4.4.4

浏览过的版块

回复 7楼电影结束了的帖子