一个样本，送上

显示全部楼层 · 发表于 2007-4-19 23:52:43

一个样本，送上

显示全部楼层 · 发表于 2007-4-19 23:55:36

哪里跑

带壳程序

显示全部楼层 · 发表于 2007-4-20 00:03:04

NOD32飘过，蜘蛛杀

显示全部楼层 · 发表于 2007-4-20 00:08:03

End of the scan: 2007年4月20日  00:07
Used time: 00:09 min
The scan has been done completely.
   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-4-20 00:14:31

[:27:] 右键下载，我还没按保存呢就被卡巴杀了。。。

7.0.43 就是强啊。。。

显示全部楼层 · 发表于 2007-4-20 00:26:52

显示全部楼层 · 发表于 2007-4-20 00:44:02

[QS2009.exe]
BD标准引擎 | Generic.PWStealer.2C2BACDB
卡巴标准引擎| Trojan-PSW.Win32.Nilage.be
大蜘蛛BETA引擎| Trojan.MulDrop.origin packed by BINARYRES

显示全部楼层 · 发表于 2007-4-20 01:45:54

Antivir PE

Begin scan in 'D:\test\QS2009.rar'
D:\test\QS2009.rar
  [0] Archive type: RAR
  --> QS2009.exe
   [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-20 09:15:09

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MDNEX\QS2009.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSWFGQQ2.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-4-20 10:54:05

原帖由 moonsilver 于 2007-4-19 23:52 发表
一个样本，送上

秒杀

[病毒样本] 一个样本，送上

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源