猫廯（犇牛）gr.exe更新（14日情人节更新）

显示全部楼层 · 发表于 2009-2-14 13:28:15

观望中

显示全部楼层 · 发表于 2009-2-14 13:28:25

14日
[0] Archive type: RAR
   --> gr.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '49c45681.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
14日脱壳
[0] Archive type: RAR
--> gr_unpacked.exe
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '49f556ab.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-14 13:32:58

怎么脱壳后反而不杀了

显示全部楼层 · 发表于 2009-2-14 13:37:36

脱壳后杀

加壳运行杀～

显示全部楼层 · 发表于 2009-2-14 13:39:25

14日 To McAfee

显示全部楼层 · 发表于 2009-2-14 13:43:06

Starting the file scan:

Begin scan in 'C:\Users\lamfamily\Desktop\gr_unpacked.rar'
C:\Users\lamfamily\Desktop\gr_unpacked.rar
[0] Archive type: RAR
--> gr_unpacked.exe
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    The file was moved to '49f55a39.qua'!

End of the scan: 2009年2月14日  13:42
Used time: 00:07 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-2-14 13:45:41

好像就是加载dll然后出站吧？貌似就算杀不到只要有防火墙不让它出去就行

[ 本帖最后由 saga3721 于 2009-2-14 13:46 编辑 ]

显示全部楼层 · 发表于 2009-2-14 13:50:58

KV09杀2上报1

显示全部楼层 · 发表于 2009-2-14 15:07:12

UPX加壳的微点查不出，其余两个可以识别。

显示全部楼层 · 发表于 2009-2-14 17:12:01

卡8 Miss

[病毒样本] 猫廯（犇牛）gr.exe更新（14日情人节更新）

回复 51楼江湖的fans 的帖子

回复 63楼 ledled 的帖子

回复 51楼江湖的fans 的帖子

浏览过的版块

[病毒样本] 猫廯（犇牛）gr.exe更新（14日情人节更新）

回复 51楼 江湖的fans 的帖子

回复 63楼 ledled 的帖子

回复 51楼 江湖的fans 的帖子

浏览过的版块

回复 51楼江湖的fans 的帖子

回复 51楼江湖的fans 的帖子