转剑盟一个

显示全部楼层 · 发表于 2007-3-24 05:18:27

全球最伟大启发挂了
网马是不行的
http://www.qqpetvip.cn/qq2006.exe
AhnLab-V3 2007.3.24.0 03.23.2007 no virus found
AntiVir 7.3.1.44 03.23.2007 TR/Drop.QQHelp.BC
Authentium 4.93.8 03.23.2007 no virus found
Avast 4.7.936.0 03.23.2007 no virus found
AVG 7.5.0.447 03.23.2007 no virus found
BitDefender 7.2 03.23.2007 BehavesLike:Trojan.WUDisable
CAT-QuickHeal 9.00 03.23.2007 no virus found
ClamAV devel-20070312 03.23.2007 no virus found
DrWeb 4.33 03.23.2007 no virus found
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3504 03.23.2007 no virus found
Ewido 4.0 03.23.2007 Trojan.OnLineGames.ku
FileAdvisor 1 03.23.2007 no virus found
Fortinet 2.85.0.0 03.23.2007 suspicious
F-Prot 4.3.1.45 03.23.2007 no virus found
F-Secure 6.70.13030.0 03.23.2007 Lydra.F
Ikarus T3.1.1.3 03.23.2007 no virus found
Kaspersky 4.0.2.24 03.23.2007 no virus found
McAfee 4991 03.23.2007 no virus found
Microsoft 1.2306 03.23.2007 no virus found
NOD32v2 2140 03.23.2007 no virus found
Norman 5.80.02 03.23.2007 no virus found
Panda 9.0.0.4 03.23.2007 Suspicious file
Prevx1 V2 03.23.2007 no virus found
Sophos 4.15.0 03.23.2007 no virus found
Sunbelt 2.2.907.0 03.22.2007 no virus found
Symantec 10 03.23.2007 no virus found
TheHacker 6.1.6.080 03.23.2007 no virus found
UNA 1.83 03.16.2007 no virus found
VBA32 3.11.2 03.22.2007 no virus found
VirusBuster 4.3.7:9 03.23.2007 no virus found
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.Drop.QQHelp.BC

显示全部楼层 · 发表于 2007-3-24 06:03:54

实验效果

还会在system32下生成一个DLL

生成那个bat文件后会调用attrib的各种系统属性

在进程即将被结束后还会终止QQ.exe

[ 本帖最后由 Oceanzd 于 2007-3-24 06:05 编辑 ]

显示全部楼层 · 发表于 2007-3-24 07:58:14

何必呢?何苦呢?虽然偶也觉得NOD32的火星广告够牛X的!

[ 本帖最后由 ADAMS 于 2007-3-24 07:59 编辑 ]

显示全部楼层 · 发表于 2007-3-24 09:20:07

2楼Oceanzd版主的是个什么防火墙？

显示全部楼层 · 发表于 2007-3-24 09:27:50

这种低发率的病毒，nod32不鸟的～～～牛X的杀软是这样的。

显示全部楼层 · 发表于 2007-3-24 09:29:24

原帖由 dreamsfar 于 2007-3-24 09:20 发表
2楼Oceanzd版主的是个什么防火墙？

ssm

显示全部楼层 · 发表于 2007-3-24 09:31:05

是一个HIPS，名字叫SSM（System Safety Monitor）

显示全部楼层 · 发表于 2007-3-24 09:44:26

卡吧也挂了..

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-22
Start time: 2007-3-24 9:42
Engine(s): KAV engine (AVK 17.3463), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: qq2006.exe
In archive: D:\qq2006.rar
Status: Virus detected
Virus: BehavesLike:Trojan.WUDisable (BD-Engine)
Object: qq2006.rar
Path: D:
Status: Virus detected
Virus: BehavesLike:Trojan.WUDisable (BD-Engine)
Analysis complete: 2007-3-24 9:42
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-24 10:10:50

上报了

显示全部楼层 · 发表于 2007-3-24 10:19:32

驱逐舰挂～～小红伞杀！

[病毒样本] 转剑盟一个

本帖子中包含更多资源

本帖子中包含更多资源

回复 #4 dreamsfar 的帖子