下载者在卡巴09版限制下运行后的残留物

显示全部楼层 · 发表于 2008-7-30 15:03:40

如题；
大家拿去分析。

显示全部楼层 · 发表于 2008-7-30 15:07:35

自己占沙发

显示全部楼层 · 发表于 2008-7-30 15:12:23

Begin scan in 'C:\Users\TOSHIBA\Downloads\qqq'
C:\Users\TOSHIBA\Downloads\qqq\qqq\C\PROGRAM FILES\INTERNET EXPLORER\RASAPI32.BAK
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '48e31435.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月30日  15:10
Used time: 00:03 Minute(s)

The scan has been done completely.

   5 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-7-30 15:13:46

kv 不认识

显示全部楼层 · 发表于 2008-7-30 15:16:26

emory ok.
d:\工具\样本\qqq\qqq\ArFile.log ok.
ERROR: delete wrong pointer (00000000)
d:\工具\样本\qqq\qqq\C\PROGRAM FILES\INTERNET EXPLORER\RASAPI32.BAK ok.

显示全部楼层 · 发表于 2008-7-30 17:43:52

显示全部楼层 · 发表于 2008-7-30 17:47:38

rs 0

显示全部楼层 · 发表于 2008-7-30 20:14:29

McAfee miss

[病毒样本] 下载者在卡巴09版限制下运行后的残留物

NOD32 痿掉