收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 最强最雷人的病毒，好怪，好狠，好黑……
123456下一页
返回列表 发新帖
楼主: lianyeguzhou
 收起左侧

[病毒样本] 最强最雷人的病毒，好怪，好狠，好黑……

[复制链接]
chenchen0427
发表于 2009-1-21 21:38:03 | 显示全部楼层
驴友们没留言说有毒吗     以后还是开沙盘检测共享文件吧

[ 本帖最后由 chenchen0427 于 2009-1-21 21:39 编辑 ]
回复

举报

upside
发表于 2009-1-21 21:41:35 | 显示全部楼层
看起來是木馬下載器

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3550p

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw]
c = 0x00000000
n = 0x00000002
c = 0x00000002
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3550p]
ErrorControl = 0x00000000
Start = 0x00000002
Group = "SCSI miniport"
Tag = 0x0000002A
Type = 0x00000001

http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=1
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=2
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=3
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=4
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=5
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=6
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=7
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=8
http://66.119.122.99/q.php?m=r&a ... 33&v=69&c=9
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=10
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=11
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=12
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=13
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=14
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=15
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=16
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=17
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=18
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=19
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=20
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=21
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=22
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=23
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=24
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=25
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=26
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=27
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=28
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=29
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=30
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=31
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=32
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=33
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=34
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=35
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=36
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=37
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=38
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=39
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=40
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=41
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=42
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=43
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=44
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=45
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=46
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=47
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=48
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=49
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=50
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=51
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=52
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=53
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=54
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=55
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=56
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=57
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=58
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=59
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=60
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=61
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=62
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=63
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=64
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=65
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=66
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=67
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=68
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=69
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=70
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=71
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=72
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=73
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=74
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=75
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=76
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=77
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=78
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=79
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=80
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=81
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=82
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=83
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=84
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=85
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=86
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=87
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=88
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=89
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=90
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=91
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=92
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=93
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=94
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=95
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=96
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=97
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=98
http://66.119.122.99/q.php?m=r&a ... 3&v=69&c=99
http://66.119.122.99/q.php?m=r&a ... &v=69&c=100
http://66.119.122.99/q.php?m=r&a ... &v=69&c=101
回复

举报

llzy3575
发表于 2009-1-21 21:54:28 | 显示全部楼层
是个木马下载器，集多家病毒于一身的。
回复

举报

jb.y
发表于 2009-1-21 22:04:55 | 显示全部楼层
直接上图

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

645201
发表于 2009-1-21 22:05:32 | 显示全部楼层
原帖由 xyao 于 2009-1-21 21:10 发表
晕447262


不知用的是什么工具，这么详细
回复

举报

xyao
发表于 2009-1-21 22:06:47 | 显示全部楼层
原帖由 645201 于 2009-1-21 22:05 发表


不知用的是什么工具，这么详细


Sandboxie
回复

举报

Daigo
发表于 2009-1-21 22:08:47 | 显示全部楼层
微点，NOD同时报
回复

举报

天月新
发表于 2009-1-21 23:05:04 | 显示全部楼层
根据上面的所说,应该是自动生成,并非快速繁殖的木马.而且能遮蔽杀软噢~~
呵呵
回复

举报

c5132902
发表于 2009-1-22 00:28:50 | 显示全部楼层

TO AVG

回复

举报

浅蓝深蓝
发表于 2009-1-22 11:13:06 | 显示全部楼层
修改beep恢复杀毒软件挂钩的API
覆盖系统文件cdaudio.sys
回复

举报

下一页 »
123456下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-3 14:34 , Processed in 0.098871 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表