3个费儿挂的5

显示全部楼层 · 发表于 2007-2-10 22:45:55

大家扫扫看那.............

显示全部楼层 · 发表于 2007-2-10 22:50:42

kis 依然没看到

显示全部楼层 · 发表于 2007-2-11 03:00:56

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\111111.rar'
C:\Documents and Settings\Administrator\My Documents\
  111111.rar
[0] Archive type: RAR
--> ProcPt.sys
--> RUNDLLFROMWIN2000.EXE
--> Ryhpg.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
剩下的exe运行没反应。。Thank you for your submission. Below you can see the current status of the uploaded files.

We received the following archive files:File ID    Filename    Size (Byte) Result
204702    111111.rar 10.134 OK

A listing of files contained inside archives alongside their results can be found below:File ID    Filename    Size (Byte) Result
204667    ProcPt.sys    16.802    UNDER ANALYSIS
204668    RUNDLLFROMWIN2000.EXE    10.240    UNDER ANALYSIS

Please find a detailed report concerning each individual sample below: Filename Result
ProcPt.sys    UNDER ANALYSIS

The file 'ProcPt.sys' has been determined to be 'UNDER ANALYSIS'.
Filename Result
RUNDLLFROMWIN2000.EXE    UNDER ANALYSIS

The file 'RUNDLLFROMWIN2000.EXE' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2007-2-11 06:34:13

PCC的HIPS无反应

显示全部楼层 · 发表于 2007-2-11 11:08:03

avast! 过!

运行时
360 拦截恶意软件 <DirVin> 安装

显示全部楼层 · 发表于 2007-2-11 12:07:34

费尔确实挂了，多引擎扫描如下

[病毒样本] 3个费儿挂的5

本帖子中包含更多资源

本帖子中包含更多资源