黑客工具 nod32报

显示全部楼层 · 发表于 2007-2-24 22:55:58

蜥蜴Demo.exe
大概是来搞DOS的

显示全部楼层 · 发表于 2007-2-24 23:02:33

--> òáòæDemo.exe
[DETECTION] File has been compressed with an unusual runtime compression tool (PCK/PESpin). Please verify the origin of the file

壳？

显示全部楼层 · 发表于 2007-2-25 02:06:26

小红伞
C:\Documents and Settings\Administrator\桌面\gzl167.rar
  [0] Archive type: RAR
  --> òáòæDemo.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/PESpin). Please verify the origin of the file
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-2-25 02:15:33

原帖由 jimmyleo 于 2007-2-24 07:02 发表
--> òáòæDemo.exe
File has been compressed with an unusual runtime compression tool (PCK/PESpin). Please verify the origin of the file

壳？

并不是壳，pespin的壳雨伞能脱出，所以没必要报这个壳，只是说这个文件不是一个正常的运行文件，告诉你是什么加壳的，就和kav报告后面的//(壳），一样

[ 本帖最后由 mofunzone 于 2007-2-24 10:34 编辑 ]

显示全部楼层 · 发表于 2007-2-25 02:18:54

kis 6 and avg anti-spyware 都沒反應 . . .

显示全部楼层 · 发表于 2007-2-25 08:09:45

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 1/5/2007
Start time: 2/25/2007 08:08
Engine(s): Engine A (AVK 17.1835), Engine B (AVKB 17.140)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: 蜥蜴Demo.exe\[PESpin]
In archive: C:\Documents and Settings\Administrator\桌面\gzl167.rar
Status: Virus detected
Virus: Win32:Small-DTK [Trj] (Engine B)
Object: gzl167.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Win32:Small-DTK [Trj] (4x) (Engine B)
Analysis complete: 2/25/2007 08:08
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-2-25 09:06:32

费尔右键扫描未报。

显示全部楼层 · 发表于 2007-2-25 10:59:37

驱逐舰不报

显示全部楼层 · 发表于 2007-2-25 11:19:33

谢M版指教

[病毒样本] 黑客工具 nod32报

本帖子中包含更多资源

回复 #4 mofunzone 的帖子