灯泡男同学下载的几个木马，用kav的上报吧。。

显示全部楼层 · 发表于 2007-2-2 02:34:32

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\wlwz.rar'
C:\Documents and Settings\Administrator\My Documents\
  wlwz.rar
[0] Archive type: RAR
--> wlwz.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\datang.rar'
C:\Documents and Settings\Administrator\My Documents\
  datang.rar
[0] Archive type: RAR
--> datang.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\gezi.rar'
C:\Documents and Settings\Administrator\My Documents\
  gezi.rar
[0] Archive type: RAR
--> gezi.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\huaxia.rar'
C:\Documents and Settings\Administrator\My Documents\
  huaxia.rar
[0] Archive type: RAR
--> huaxia.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\mhxy.rar'
C:\Documents and Settings\Administrator\My Documents\
  mhxy.rar
[0] Archive type: RAR
--> mhxy.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\mlbb.rar'
C:\Documents and Settings\Administrator\My Documents\
  mlbb.rar
[0] Archive type: RAR
--> mlbb.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-2-2 03:20:50

卡巴全挂了

显示全部楼层 · 发表于 2007-2-2 03:23:47

请问，这些是不是其他已知病毒，只是经过加壳包装？

显示全部楼层 · 发表于 2007-2-2 03:25:31

3楼的，人家有病毒搜集网络的

显示全部楼层 · 发表于 2007-2-2 03:36:55

原帖由 绅博周幸 于 2007-2-2 03:25 发表
3楼的，人家有病毒搜集网络的

这一点我不怀疑，但我不是在问你。

显示全部楼层 · 发表于 2007-2-2 04:58:35

原帖由 solcroft 于 2007-2-1 11:23 发表
请问，这些是不是其他已知病毒，只是经过加壳包装？

实际上大部分是这样的
主流免杀的技术就是导出dll加壳之后导回
但是不排除有强人直接改代码的。。
这年头，病毒都open resouces了。。

显示全部楼层 · 发表于 2007-2-2 05:12:48

楼上的同学，单词漏个r

[ 本帖最后由 jlennon 于 2007-2-2 05:15 编辑 ]

显示全部楼层 · 发表于 2007-2-2 08:52:50

原帖由 mofunzone 于 2007-2-2 04:58 发表

实际上大部分是这样的
主流免杀的技术就是导出dll加壳之后导回
但是不排除有强人直接改代码的。。
这年头，病毒都open resouces了。。

厉害

显示全部楼层 · 发表于 2007-2-2 10:50:05

卡巴昨天病毒库报第2、4、6个。

显示全部楼层 · 发表于 2007-2-2 10:57:29

费尔2月1日病毒库竟然全挂！

[病毒样本] 灯泡男同学下载的几个木马，用kav的上报吧。。

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源