[病毒样本] 1X

显示全部楼层 · 发表于 2009-1-6 15:46:33

1X 应该是易语言....同学U盘挖到的（同学装的卡巴09...一看卡巴的进程都没了...悲哀一下

）

过了NOD 还有N多..

最后....某星竟然报了...

[ 本帖最后由 lingbo110120 于 2009-1-6 16:02 编辑 ]

显示全部楼层 · 发表于 2009-1-6 15:59:41

Begin scan in 'C:\Users\Kitman\Desktop\Desktop'
C:\Users\Kitman\Desktop\Desktop\AdobeR.exe
[DETECTION] Contains recognition pattern of the WORM/Rjump.D worm
[NOTE] A backup was created as '49d20fc0.qua' ( QUARANTINE )
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2009-1-6 16:05:00

上报ESET

显示全部楼层 · 发表于 2009-1-6 16:13:14

有什么动作吗?eq都没反应.....

显示全部楼层 · 发表于 2009-1-6 16:14:28

to kl

显示全部楼层 · 发表于 2009-1-6 16:15:32

那个dll文件似乎不是病毒也

显示全部楼层 · 发表于 2009-1-6 16:20:29

http://virscan.org/report/34751f798d7d3e9a3ca4e025f1cdbf13.html

显示全部楼层 · 发表于 2009-1-6 17:52:29

Start of the scan: 2009年1月6日  17:45
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\样本a.rar'
C:\Documents and Settings\***\桌面\样本a.rar
[0] Archive type: RAR
--> ￑￹ﾱﾾa\AdobeR.exe
   [DETECTION] Contains recognition pattern of the WORM/Rjump.D worm
[NOTE]    A backup was created as '49c48f75.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
-------------------------------------------------------------------------------红伞S版(库V7.01.01.72)杀。
File ID  Filename Size (Byte) Result
25225872  样本x1.rar 147.46 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
114447  msvcr71.dll  340 KB  KNOWN CLEAN ----------已知的干净的

显示全部楼层 · 发表于 2009-1-6 20:17:29

Hello,

AdobeR.exe_, msvcr71.dll

No malicious code were found in these files.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

显示全部楼层 · 发表于 2009-1-6 21:06:10

http://www.threatexpert.com/repo ... 8f164e8641b48866a70

http://www.threatexpert.com/repo ... 8b17d99ece768a70732

[病毒样本] 1X

本帖子中包含更多资源