一个自动变换自身的病毒

rasis

df(2).rar
    [0] Archive type: RAR
    --> comment.htt
      [DETECTION] Contains recognition pattern of the VBS/Starter.B VBS script virus
    --> ﾻ￘ￊￕￕﾾcomment.htt
      [DETECTION] Contains recognition pattern of the VBS/Starter.B VBS script virus
    --> df.exe
      [DETECTION] Contains recognition pattern of the W32/FunLove.4099 Windows virus
    --> WINFILE.EXE
      [DETECTION] Contains recognition pattern of the W32/FunLove.4099 Windows virus
    --> ﾻ￘ￊￕￕﾾWINFILE.EXE
      [DETECTION] Contains recognition pattern of the W32/FunLove.4099 Windows virus
    --> ﾹﾤﾾ￟.exe
      [DETECTION] Contains recognition pattern of the W32/FunLove.4099 Windows virus

尤金卡巴斯基

2008/8/9 22:07:18        已清除        木马程序 Exploit.HTML.Agent.am        G:\Temp\Virus\df.rar/df.exe               
2008/8/9 22:07:18        已清除        木马程序 Exploit.HTML.Agent.am        G:\Temp\Virus\df.rar/WINFILE.EXE               
2008/8/9 22:07:18        已清除        木马程序 Exploit.HTML.Agent.am        G:\Temp\Virus\df.rar/回收站WINFILE.EXE               
2008/8/9 22:07:18        已清除        木马程序 Exploit.HTML.Agent.am        G:\Temp\Virus\df.rar/工具.exe

z8820086

10报6

Older

2008/8/10 8:27:20 maorenke 2200 Sign of "VBS:Malware-gen" has been found in "E:\download\df.rar\comment.htt" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "VBS:Malware-gen" has been found in "E:\download\df.rar\回收站comment.htt" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:FunLove-4099" has been found in "E:\download\df.rar\df.exe\[Embedded#11000]" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:Wukill-B [Wrm]" has been found in "E:\download\df.rar\df.exe" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:FunLove-4099" has been found in "E:\download\df.rar\WINFILE.EXE\[Embedded#11000]" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:Wukill-B [Wrm]" has been found in "E:\download\df.rar\WINFILE.EXE" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:FunLove-4099" has been found in "E:\download\df.rar\回收站WINFILE.EXE\[Embedded#11000]" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:Wukill-B [Wrm]" has been found in "E:\download\df.rar\回收站WINFILE.EXE" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:FunLove-4099" has been found in "E:\download\df.rar\工具.exe\[Embedded#11000]" file.  
2008/8/10 8:27:24 maorenke 2200 Sign of "Win32:Wukill-B [Wrm]" has been found in "E:\download\df.rar\工具.exe" file.  
avast10个

清澈燃烧

卡巴不让下