紅傘C過但是P版報的的木馬

显示全部楼层 · 发表于 2007-5-4 15:50:23

NOD报什么

显示全部楼层 · 发表于 2007-5-4 15:50:41

antivir那是已知ok？

显示全部楼层 · 发表于 2007-5-4 15:51:13

看好了。。。。。DR/PCK。。。。。

显示全部楼层 · 发表于 2007-5-4 15:51:30

看2楼的。。。。。

显示全部楼层 · 发表于 2007-5-4 15:52:46

貌似交流病毒签名导致报壳

反正ESET好像不太交流病毒签名

显示全部楼层 · 发表于 2007-5-4 15:54:53

现在发现nod32有一个疑似报壳的报法。。。自己不敢肯定。。在eset的blog里面什么也没找到

显示全部楼层 · 发表于 2007-5-4 15:55:00

我严重怀疑你会不会英文
Contains signature of the dropper DR/PCK.PolyCrypt.B.13
给我翻译一下吧

显示全部楼层 · 发表于 2007-5-4 15:55:42

File:  1423.rar
Status:  INFECTED/MALWARE
MD5  051cee71f9d954bcdb11eeb37cd966bc
Packers detected:  PE_PATCH.POLY, PE_PATCH.UPX, UPX

Scanner results
Scan taken on 04 May 2007 07:53:35 (GMT)
A-Squared  Found nothing
AntiVir  Found DR/PCK.PolyCrypt.B.13
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found MemScan:Trojan.DNSChanger.BF
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found Packed.Win32.PolyCrypt.b
Fortinet  Found nothing
Kaspersky Anti-Virus  Found Packed.Win32.PolyCrypt.b
NOD32  Found a variant of Win32/TrojanDownloader.Zlob
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-5-4 15:56:21

自己看看红伞和卡巴报的是什么吧。。。再看看加了什么壳。。。。

显示全部楼层 · 发表于 2007-5-4 15:57:36

AhnLab-V3 2007.5.4.0 05.04.2007  no virus found
AntiVir 7.4.0.15 05.04.2007 DR/PCK.PolyCrypt.B.13
Authentium 4.93.8 05.03.2007  no virus found
Avast 4.7.997.0 05.03.2007  no virus found
AVG 7.5.0.467 05.03.2007  no virus found
BitDefender 7.2 05.04.2007 MemScan:Trojan.DNSChanger.BF
CAT-QuickHeal 9.00 05.03.2007  no virus found
ClamAV devel-20070416 05.03.2007  no virus found
DrWeb 4.33 05.04.2007  no virus found
eSafe 7.0.15.0 05.03.2007  no virus found
eTrust-Vet 30.7.3614 05.04.2007  no virus found
Ewido 4.0 05.03.2007  no virus found
FileAdvisor 1 05.04.2007  no virus found
Fortinet 2.85.0.0 05.04.2007  no virus found
F-Prot 4.3.2.48 05.03.2007  no virus found
F-Secure 6.70.13030.0 05.04.2007 Packed.Win32.PolyCrypt.b
Ikarus T3.1.1.7 05.04.2007  no virus found
Kaspersky 4.0.2.24 05.04.2007 Packed.Win32.PolyCrypt.b
McAfee 5023 05.03.2007  no virus found
Microsoft 1.2503 05.03.2007  no virus found
NOD32v2 2238 05.03.2007 a variant of Win32/TrojanDownloader.Zlob
Norman 5.80.02 05.03.2007  no virus found
Panda 9.0.0.4 05.04.2007  no virus found
Prevx1 V2 05.04.2007  no virus found
Sophos 4.17.0 05.04.2007  no virus found
Sunbelt 2.2.907.0 05.03.2007  no virus found
Symantec 10 05.04.2007  no virus found
TheHacker 6.1.6.104 04.15.2007 Trojan/DNSChanger.ik
VBA32 3.11.4 05.03.2007  no virus found
VirusBuster 4.3.7:9 05.03.2007  no virus found
Webwasher-Gateway 6.0.1 05.04.2007 Trojan.PCK.PolyCrypt.B.13

[病毒样本] 紅傘C過但是P版報的的木馬

回复 #7 EQ2 的帖子

回复 #12 mofunzone 的帖子

回复 #11 wangjay1980 的帖子

回复 #15 promised 的帖子

回复 #13 EQ2 的帖子