昨晚中标

显示全部楼层 · 发表于 2008-11-25 16:57:21

卡巴拒绝下载

显示全部楼层 · 发表于 2008-11-25 17:00:07

.....不是病毒...

显示全部楼层 · 发表于 2008-11-25 17:34:52

McAfee發布Extra.dat:
可以偵測"LSASS.EXE"為"Generic.dx"

.

解毒等明天Dr.Web回覆

.

显示全部楼层 · 发表于 2008-11-26 12:47:41

eset的高级病毒研究员回复的

Hmm, according to one of my colleagues who was doing the analysis (and
later re-classification) of this trojan, it doesn't seem to be actually
"infecting" the files. It simply overwrites the beginnings of the files
with its body -- so there is no "cleaning" possible, other than just
deleting the files -- which is precisely what NOD is doing. Do you have
some reason to believe otherwise?

显示全部楼层 · 发表于 2008-11-26 12:53:37

LZ安息吧！
阿门！

显示全部楼层 · 发表于 2008-11-26 15:29:50

,这个毒毒好强大哦。

显示全部楼层 · 发表于 2008-11-26 15:35:05

没有清毒的可能？只能DEL？期待DRWEB的回复。

显示全部楼层 · 发表于 2008-11-26 17:44:52

Dr.Web稍早回覆了,跟ESET的看法相同:
"LSASS.EXE"

Your request has been analyzed. New virus record has been added.
Virus: Trojan.DownLoad.21875.

Thank you for the cooperation.

--
Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.

"Lingoes.exe"

Your request has been analyzed. New virus record has been added.
Virus: Trojan.Click.22952.

Thank you for the cooperation.

--
Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.

看來是不需要解毒的

.

不過Dr.Web應該可以清除生成物

.

显示全部楼层 · 发表于 2008-11-26 17:51:42

只要能杀就OK。免得别人遭殃阿

显示全部楼层 · 发表于 2008-11-26 18:28:54

下载样本后 kav7还是查出来了

[病毒样本] 昨晚中标

回复 9楼西风萧雨的帖子

本帖子中包含更多资源

浏览过的版块

[病毒样本] 昨晚中标

回复 9楼 西风萧雨 的帖子

本帖子中包含更多资源

浏览过的版块

回复 9楼西风萧雨的帖子