U盘伪装文件夹,NOD,小a没反应

显示全部楼层 · 发表于 2008-12-19 17:34:30

我是很好奇到底它怎麼變種的
我養了 KAVO KXVO REVO 都會自動下載變種
但就這隻文件夾病毒不會下載
但在網路上它還是不斷出現新的
這毒原理不怎樣很容易刪除
但卻對它下載的來源卻不知
可否有人能回應一下如何讓它更新變種呢

显示全部楼层 · 发表于 2008-12-19 20:57:27

McAfee miss

显示全部楼层 · 发表于 2008-12-19 21:00:13

原帖由 upside 于 2008-12-19 17:34 发表
我是很好奇到底它怎麼變種的
我養了 KAVO KXVO REVO 都會自動下載變種
但就這隻文件夾病毒不會下載
但在網路上它還是不斷出現新的
這毒原理不怎樣很容易刪除
但卻對它下載的來源卻不知
可否有人能回應一下 ...

我来回应好了。
话说英雄莫问出处，病毒亦然！回应完毕[:27:]

显示全部楼层 · 发表于 2008-12-19 22:16:42

Begin scan in 'C:\Users\Kitman\Desktop\恅璃'
C:\Users\Kitman\Desktop\恅璃\文件.exe
[DETECTION] Is the TR/Drop.Flystud.KW Trojan
[NOTE]    A backup was created as '4979fb9b.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年12月19日  22:16
Used time: 00:02 Minute(s)

The scan has been done completely.

   1 Scanning directories
   1 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-12-19 22:53:25

2008-12-19 22:52:38 修改文件操作:阻止
进程路径:C:\WINDOWS\Explorer.EXE
文件路径:C:\WINDOWS\SYSTEM.INI
触发规则:所有程序规则->特别位置及文件-共用->*\System.ini

显示全部楼层 · 发表于 2008-12-19 23:49:04

這個好回應的真貼切

显示全部楼层 · 发表于 2009-1-20 02:26:28

易语言写的，来源是什么？捆绑？下载器下载？
病毒的目的是什么呢？习作？

显示全部楼层 · 发表于 2009-1-20 02:35:16

avast!：C:\Documents and Settings\Admin\Desktop\文件.exe [L] Win32:Trojan-gen {Other} (0)
NOD32：C:\Users\Standard user\Desktop\文件.exe - Win32/FlyStudio.NEF trojan - cleaned by deleting - quarantined

[病毒样本] U盘伪装文件夹,NOD,小a没反应

回复 13楼 saga3721 的帖子

浏览过的版块