三个无壳的

显示全部楼层 · 发表于 2007-5-20 17:03:45

三个无壳的

显示全部楼层 · 发表于 2007-5-20 17:05:25

nod果然不报dll文件

Scanning Log
NOD32 version 2277 (20070518) NT
Command line: C:\Documents and Settings\fengyeyin\桌面\ ?
?桌面.rar
Checking CRC of NOD32.EXE: Status OK
d:\Program Files\Eset\nod32.exe - is OK
Scanning memory: Not performed (option disabled)
Scanning MBR and boot sectors: Not performed (option  ?
?disabled)
Date: 20.5.2007  Time: 17:05:26
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\fengyeyin\桌面\桌面.rar
C:\Documents and Settings\fengyeyin\桌面\桌面.rar ?RAR  ?
??Server.rar ?RAR ?Server.exe - Win32/TrojanDownloader. ?
?Small.DIE trojan
C:\Documents and Settings\fengyeyin\桌面\桌面.rar ?RAR  ?
??sdcs.rar ?RAR ?sdcs.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\桌面.rar ?RAR  ?
??绘梦银月下载器.rar ?RAR ?绘梦银月下载.exe - probably  ?
?unknown NewHeur_PE virus [7]
C:\Documents and Settings\fengyeyin\桌面\桌面.rar:Zone. ?
?Identifier - is OK
Number of scanned files: 4
Number of threats found: 2
Time of completion: 17:05:27 Total scanning time: 1 sec  ?
?(00:00:01)
Notes:
[7] File is probably infected with an unknown virus.

[ 本帖最后由风野胤于 2007-5-20 17:07 编辑 ]

显示全部楼层 · 发表于 2007-5-20 17:09:42

已删除: 木马程序 Trojan-Downloader.Win32.Small.die 文件: F:\桌面.rar\Server.rar\Server.exe

卡6报一个

显示全部楼层 · 发表于 2007-5-20 17:10:36

Starting the file scan:

Begin scan in 'F:\样本\桌面.rar'
F:\样本\桌面.rar
  [0] Archive type: RAR
--> Server.rar
   [1] Archive type: RAR
   --> Server.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> sdcs.rar
   [1] Archive type: RAR
   --> sdcs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
--> »æÃÎÒøÔÂÏÂÔØÆ÷.rar
   [1] Archive type: RAR
   --> »æÃÎÒøÔÂÏÂÔØ.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-20 17:12:27

detected: Trojan program Trojan-Downloader.Win32.Small.die File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/Server.rar/Server.exe
detected: virus Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/»æÃÎÒøÔÂÏÂÔØÆ÷.rar/»æÃÎÒøÔÂÏÂÔØ.exe//FSG

显示全部楼层 · 发表于 2007-5-20 17:14:39

卡7，一个已知，一个启发：

detected: Trojan program Trojan-Downloader.Win32.Small.die File: E:\²¡¶¾\×ÀÃæ.rar/Server.rar/Server.exe

detected: virus Trojan.Generic (modification) File: E:\²¡¶¾\×ÀÃæ.rar/»æÃÎÒøÔÂÏÂÔØÆ÷.rar/»æÃÎÒøÔÂÏÂÔØ.exe//FSG

显示全部楼层 · 发表于 2007-5-20 17:16:37

无壳？
怎么费尔有一个还是报了壳程序呢？

显示全部楼层 · 发表于 2007-5-20 17:18:24

我没加壳，晕

显示全部楼层 · 发表于 2007-5-20 17:19:25

难道费尔这次会是误报么？
我觉得应该不会啊

显示全部楼层 · 发表于 2007-5-20 17:19:29

FSG。。。。记得很多人都说过如果是报壳的话。。后面不会带有a,b等之类的。。。但是很多杀软都会这样报。。。

[病毒样本] 三个无壳的

本帖子中包含更多资源

本帖子中包含更多资源