被修改的Kernel32.dll

显示全部楼层 · 发表于 2009-9-15 11:57:22

什么也不说，直接上传
附带原始版本

显示全部楼层 · 发表于 2009-9-15 12:08:45

这个样本据说国内只有毒霸可以查杀

寒

显示全部楼层 · 发表于 2009-9-15 12:11:44

金山Win32.KerLoader.o.1150464

显示全部楼层 · 发表于 2009-9-15 12:16:16

https://www.virustotal.com/anali ... e4fe2c62-1252988174

TO KL,LL,ESET,ANTIVIR,COMODO,mcafee

https://www.virustotal.com/anali ... e4fe2c62-1252988174

http://sample.nod32.com.hk/index ... 8684113ce76ff55cc44
文件名：kernel32.dll2

MD5值：772df1dbc3a138684113ce76ff55cc44

当前状态：正在处理

提交日期：2009-09-15 12:16:59

提交者：管理员或者匿名用户

Filename Result
kernel32.dll2 MALWARE

The file 'kernel32.dll2' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 sam.to 于 2009-9-15 12:18 编辑 ]

显示全部楼层 · 发表于 2009-9-15 12:28:09

小紅傘都掃不到

显示全部楼层 · 发表于 2009-9-15 13:20:51

to symantec, sophos, f-secure, AVG
FS认为CLEAN

[ 本帖最后由 jason_jiang 于 2009-9-15 17:39 编辑 ]

显示全部楼层 · 发表于 2009-9-15 14:53:15

The file 'kernel32.dll2' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-9-15 21:39:39

It's a legitimate Windows file dude!
萝卜丝大叔说的

显示全部楼层 · 发表于 2009-9-15 21:45:01

大叔。。

显示全部楼层 · 发表于 2009-9-15 22:05:17

to McAfee

[病毒样本] 被修改的Kernel32.dll

本帖子中包含更多资源

回复 8楼 The EQs 的帖子