據說是流氓頭子..

显示全部楼层 · 发表于 2007-4-27 01:31:56

上报

显示全部楼层 · 发表于 2007-4-27 01:33:57

File:  book056.rar
Status:  POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)
MD5  1f2ef3b27744bbb792948e05c94dbbbf
Packers detected:  ASPACK

Scanner results
Scan taken on 26 Apr 2007 17:31:07 (GMT)
A-Squared  Found nothing
AntiVir  Found TR/Drop.Crypt.CFI
ArcaVir  Found nothing
Avast  Found Win32:Delf-CTL
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-4-27 01:37:20

显示全部楼层 · 发表于 2007-4-27 08:20:34

卡巴6.0飘过上报去了
不知道7.0表现如何

显示全部楼层 · 发表于 2007-4-27 09:20:41

微点砍鸟

显示全部楼层 · 发表于 2007-4-27 09:43:18

我的KB没报不过怎么用文件粉碎机粉碎不了呢？

显示全部楼层 · 发表于 2007-4-27 09:46:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\book056.rar'
C:\Documents and Settings\morgan\My Documents\
  book056.rar
[0] Archive type: RAR
--> book056.exe
      [DETECTION] Is the Trojan horse TR/Drop.Crypt.CFI
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-27 11:41:58

原帖由 solcroft 于 2007-4-27 01:37 发表
60374

现在微点直接报已知奇怪我第一次运行的时候和你的图片是一样的情况不过还是能运行的微点当时没报已知

这支毒还想偷梁换柱 “替换”影子系统ShadowUser 蛮阴险的

Internat.exe》C:\Program Files\ShadowStor\ShadowUser\hsuatshut.exe》 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run SuNotification

[ 本帖最后由 Nblock 于 2007-4-27 11:46 编辑 ]

显示全部楼层 · 发表于 2007-4-27 11:47:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Internat.rar'
C:\Documents and Settings\morgan\My Documents\
  Internat.rar
[0] Archive type: RAR
--> Internat.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 據說是流氓頭子..

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源