一个居然全过的？

7sumetai

发个全过的 ，NOD32运行报……

AntiVir	7.3.1.37	02.17.2007 [td]no virus found
Authentium	4.93.8	02.16.2007 [td]no virus found
Avast	4.7.936.0	02.18.2007 [td]no virus found
AVG	386	02.17.2007 [td]no virus found
BitDefender	7.2	02.17.2007 [td]no virus found
CAT-QuickHeal	9.00	02.16.2007 [td]no virus found
ClamAV	devel-20060426	02.17.2007 [td]no virus found
DrWeb	4.33	02.17.2007 [td]no virus found
eSafe	7.0.14.0	02.16.2007 [td]no virus found
eTrust-Vet	30.4.3408	02.17.2007 [td]no virus found
Ewido	4.0	02.17.2007 [td]no virus found
Fortinet	2.85.0.0	02.17.2007 [td]no virus found
F-Prot	4.2.1.29	02.16.2007 [td]no virus found
F-Secure	6.70.13030.0	02.17.2007 [td]no virus found
Ikarus	T3.1.0.31	02.17.2007 [td]no virus found
Kaspersky	4.0.2.24	02.18.2007 [td]no virus found
McAfee	4965	02.16.2007 [td]no virus found
Microsoft	1.2204	02.17.2007 [td]no virus found
NOD32v2	2067	02.17.2007 [td]no virus found
Norman	5.80.02	02.16.2007 [td]no virus found
Panda	9.0.0.4	02.17.2007 [td]no virus found
Prevx1	V2	02.18.2007 [td]no virus found
Sophos	4.14.0	02.16.2007 [td]no virus found
Sunbelt	2.2.907.0	02.17.2007 [td]no virus found
Symantec	10	02.18.2007 [td]no virus found
TheHacker	6.1.6.059	02.16.2007 [td]no virus found
UNA	1.83	02.16.2007 [td]no virus found
VBA32	3.11.2	02.17.2007 [td]no virus found
VirusBuster	4.3.19:9	02.17.2007 [td]no virus found

[ 本帖最后由 7sumetai 于 2007-2-18 08:48 编辑 ]

绅博周幸

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
207566  almc_k.rar 193.473 OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
207567  almc_k.dll  491.792  UNDER ANALYSIS
62073  almc_k.sys  4.080  KNOWN CLEAN


Please find a detailed report concerning each individual sample below:

Filename Result
almc_k.dll  UNDER ANALYSIS

The file 'almc_k.dll' has been determined to be 'UNDER ANALYSIS'.

Filename Result
almc_k.sys  KNOWN CLEAN

The file 'almc_k.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows 2000 (SP0)'.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.
Print this page

7sumetai

'Windows 2000 (SP0)'是个什么东西？

hsjj2005

费尔右键扫描未报。

7sumetai

无语中了 KP的回复好快——found nothing...
但是这个东西明明会hook SSDT而且老是自己注册为开机运行的服务

ALEXBLAIR

原帖由 7sumetai 于 2007-2-18 08:57 发表
'Windows 2000 (SP0)'是个什么东西？

WINDOWS 2000原版
没有SP补丁的版本

ly250094040

NOD不报偶还以为不是病毒

bluenice

楼主说nod运行报，里面根本没有可执行文件！

马力

驱逐舰没报

daps

怎么运行?