我也来几个

显示全部楼层 · 发表于 2007-5-21 18:04:43

刚开机系统时间还正常，一会就变成1966年了，我找了半天好像就是这几个文件在作怪，主要是卡巴不杀，给大家研究研究。

显示全部楼层 · 发表于 2007-5-21 18:06:19

乌拉
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\__AIMC_Att0.rar'
C:\Documents and Settings\morgan\My Documents\
  __AIMC_Att0.rar
[0] Archive type: RAR
--> romdrivers.bkk
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> romdrivers.bak
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> HiJack.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
--> romdrivers.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-21 18:06:39

NOD32飘过

Starting the file scan:

Begin scan in 'D:\anti-malware测试\未解压\__AIMC_Att0.rar'
D:\anti-malware测试\未解压\__AIMC_Att0.rar
  [0] Archive type: RAR
  --> romdrivers.bkk
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> romdrivers.bak
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> HiJack.dll
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> romdrivers.dll
   [DETECTION] Contains suspicious code HEUR/Crypted
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-21 18:07:32

懒得DLLLOADER

显示全部楼层 · 发表于 2007-5-21 18:07:41

汗啊,红伞又是报壳,

不过能杀出来就好了

Starting the file scan:
Begin scan in 'F:\样本\__AIMC_Att0.rar'
F:\样本\__AIMC_Att0.rar
  [0] Archive type: RAR
  --> romdrivers.bkk
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> romdrivers.bak
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> HiJack.dll
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> romdrivers.dll
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-21 18:07:57

Trojan.PSW.OnlineGames.bpa

rising

显示全部楼层 · 发表于 2007-5-21 18:09:00

原帖由 欠你幸福 于 2007-5-21 18:06 发表
NOD32飘过
Starting the file scan:

Begin scan in 'D:\anti-malware测试\未解压\__AIMC_Att0.rar'
D:\anti-malware测试\未解压\__AIMC_Att0.rar
[0] Archive type: RAR
--> romdrivers.bkk
...

不知道AVAST能不能查的出来

显示全部楼层 · 发表于 2007-5-21 18:09:49

原帖由 moonsilver 于 2007-5-21 18:07 发表
Trojan.PSW.OnlineGames.bpa

rising

瑞星居然把壳给脱了

显示全部楼层 · 发表于 2007-5-21 18:09:51

又是来个拿别人的病毒来重发的人

显示全部楼层 · 发表于 2007-5-21 18:13:16

原帖由 solcroft 于 2007-5-21 18:09 发表
又是来个拿别人的病毒来重发的人

番茄版的承诺到那里去了

[病毒样本] 我也来几个

本帖子中包含更多资源