58af40

显示全部楼层 · 发表于 2008-6-30 19:34:37

AhnLab-V3	2008.6.27.1	2008.06.30	-
AntiVir	7.8.0.59	2008.06.30	HEUR/Crypted
Authentium	5.1.0.4	2008.06.29	W32/D_Banker!Generic
Avast	4.8.1195.0	2008.06.28	-
AVG	7.5.0.516	2008.06.29	-
BitDefender	7.2	2008.06.30	-
CAT-QuickHeal	9.50	2008.06.28	-
ClamAV	0.93.1	2008.06.30	-
DrWeb	4.44.0.09170	2008.06.30	-
eSafe	7.0.17.0	2008.06.29	-
eTrust-Vet	31.6.5914	2008.06.30	-
Ewido	4.0	2008.06.27	-
F-Prot	4.4.4.56	2008.06.29	W32/D_Banker!Generic
F-Secure	7.60.13501.0	2008.06.26	Suspicious:W32/Malware!Gemini
Fortinet	3.14.0.0	2008.06.30	-
GData	2.0.7306.1023	2008.06.30	-
Ikarus	T3.1.1.26.0	2008.06.30	-
Kaspersky	7.0.0.125	2008.06.30	-
McAfee	5327	2008.06.27	-
Microsoft	1.3704	2008.06.30	-
NOD32v2	3226	2008.06.30	-
Norman	5.80.02	2008.06.27	-
Panda	9.0.0.4	2008.06.29	-
Prevx1	V2	2008.06.30	-
Rising	20.51.02.00	2008.06.30	-
Sophos	4.30.0	2008.06.30	-
Sunbelt	3.0.1176.1	2008.06.26	VIPRE.Suspicious
Symantec	10	2008.06.30	-
TheHacker	6.2.96.364	2008.06.28	-
TrendMicro	8.700.0.1004	2008.06.30	-
VBA32	3.12.6.8	2008.06.30	-
VirusBuster	4.5.11.0	2008.06.30	-
Webwasher-Gateway	6.6.2	2008.06.30	Heuristic.Crypted

显示全部楼层 · 发表于 2008-6-30 20:01:54

显示全部楼层 · 发表于 2008-6-30 20:06:45

原帖由 wangjay1980 于 2008-6-30 20:01 发表
死

是刚才我发的那个的生成物小红伞启发壳

显示全部楼层 · 发表于 2008-6-30 20:23:13

[Found possible virus] <W32/D_Banker!Generic (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\winlogon.rar->winlogon.exe

---------------------------------------------------------------------
Scan ended: 2008-6-30, 20:23:04
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-30 20:26:24

附件确实是死的。

显示全部楼层 · 发表于 2008-6-30 21:57:08

E:\winlogon.rar>>winlogon.exe Heuri.Possible/Packed 启发式.

死的报壳...

显示全部楼层 · 发表于 2008-6-30 22:44:35

本来都是死的

[病毒样本] 58af40

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4