飛塔報啟發的樣本

lanvin

hips高手來看看

The EQs

怀疑误报ing

马力

驱逐舰没发现

The EQs

我服了。。。。。jotti上都没报。。。

mofunzone

病毒病毒病毒病毒病毒病毒病毒病毒病毒
上报上报上报上报上报上报上报上报上报

tracydk

误报吧

scottxzt

是google的话预计是误报了.

mofunzone

现在人心浮躁呀。。
生成的东西，能不能运行我就懒得测试了
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\system32.rar'
C:\Documents and Settings\morgan\My Documents\
  system32.rar
    [0] Archive type: RAR
    --> vsx16.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> drivers\iexplore.exe
    --> drivers\svchost.exe
    --> adtool.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> lxhjd8e4jdf.dll
        [DETECTION] Is the Trojan horse TR/Dldr.Small.ddx.147
        [WARNING]   Infected files in archives cannot be repaired!
    --> msconftb.sys
    --> p2hhr.bat
    --> rpcc.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> vsx11.exe
        [DETECTION] Is the Trojan horse TR/Agent.13824.30
        [WARNING]   Infected files in archives cannot be repaired!
    --> vsx12.exe
    --> vsx13.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> vsx15.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> svchots.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Small.ddx.145
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1[1].exe
        [DETECTION] Is the Trojan horse TR/Agent.13824.30
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2[1].exe
    --> 5[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月5日  22:42
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     12 viruses and/or unwanted programs were found
      3 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
     13 Warnings
      0 Notes
      0 Hidden objects were found

蓝色牛仔裤

都是写 注册表...写得烦了, kill it ..

lanvin

所以我說飛塔的啟發還是不錯的