样本一个

显示全部楼层 · 发表于 2007-3-25 01:30:52

已检测到: 木马程序 Trojan-Downloader.Win32.Cryptic.gen
文件: C:\Documents and Settings\Administrator\桌面\downloader.rar/downloader.exe

[ 本帖最后由 tonger2003 于 2007-3-25 02:03 编辑 ]

显示全部楼层 · 发表于 2007-3-25 01:43:08

在 D:\Documents and Settings\Administrator.B67BC7D5E37A40A\桌面\downloader.rar->downloader.exe 中发现 TrojanDownloader.Small.cam 病毒, 已删除

显示全部楼层 · 发表于 2007-3-25 01:49:11

楼主为什么说"卡巴也开始启发杀毒了"?没看出来是怎么启发的

显示全部楼层 · 发表于 2007-3-25 01:50:03

卡巴是基因。。。。不是启发
Scan performed at: 2007-3-25 1:50:13
Scanning Log
NOD32 version 2142 (20070324) NT
Command line: C:\Documents and Settings\EQ2\桌面\downloader.rar
Operating memory - is OK

Date: 25.3.2007 Time: 01:50:17
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\downloader.rar
C:\Documents and Settings\EQ2\桌面\downloader.rar ?RAR ?downloader.exe - Win32/TrojanDownloader.VB.APY trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:50:17 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-25 01:58:21

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\downloader.rar'
C:\Documents and Settings\morgan\My Documents\
  downloader.rar
[0] Archive type: RAR
--> downloader.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-25 02:03:56

加了UPX

显示全部楼层 · 发表于 2007-3-25 03:18:41

Cyberhawk

显示全部楼层 · 发表于 2007-3-25 08:04:55

老毒了

显示全部楼层 · 发表于 2007-3-25 08:30:18

已检测到: 木马程序 Trojan-Downloader.Win32.Cryptic.gen URL: http:/bbs.kafan.cn/attachment.php?aid=47206/downloader.exe

显示全部楼层 · 发表于 2007-3-25 10:43:57

驱逐舰报

[病毒样本] 样本一个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源