王家卫系列之[旺角卡门]

小邪邪

差不多都是这个，我已经打好了补丁，也就增大了直接捕获样本的难度
晕，麻烦死了不来了

Anycall-D908

呀?你们怎么抓到这个样本的?我的NOD32奇怪了,我明明选择复制到隔离区.可是在隔离区里头又看不见它的,难道见鬼了?

soul20010

BitDefender Antivirus Plus v10
image[1].rar=>image[1].jpg        Infected: Exploit.Win32.MS05-002.Gen

xpn282

我不找在线看的电影了....老老实实用BT算了..全是毒网..又看不了

Anycall-D908

原帖由 <i>aoyang</i> 于 2007-4-7 20:54 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=809442&ptid=71391" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" onload="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://bbs.kafan.cn/images/common/back.gif');}" onmousewheel="return imgzoom(this);" alt="" /></a><br />
费尔杀杀杀

<br />
     我晕~你第二个样本,我以为运行它看看微点情况如何,谁知道运行它之后竟然启动了我的BT.

xpn282

不要乱试毒哦....最好在虚拟机下试...要不然硬盘数据没了..你找谁还啊

aoyang

原帖由 Anycall-D908 于 2007-4-7 21:12 发表

     我晕~你第二个样本,我以为运行它看看微点情况如何,谁知道运行它之后竟然启动了我的BT.

晕晕，狂晕！！！那个是旺角卡门的BT种子。你没看说明啊，说明了是下载地址，是给楼主的。

xpn282

谢谢你的种子...影视帝国做的电影很不错

The EQs

Scan performed at: 2007-4-7 22:02:08
Scanning Log
NOD32 version 2172 (20070407) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面.rar
Operating memory - is OK

Date: 7.4.2007  Time: 22:02:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面.rar
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?1[1].jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?11.jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\桌面.rar ?RAR ?CAENGFRO.jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 22:02:12 Total scanning time: 0 sec (00:00:00)

Nblock

这种网少上上