坏事做绝的U盘病毒样本在此！

显示全部楼层 · 发表于 2007-5-26 11:06:49

这样便无法发作了

显示全部楼层 · 发表于 2007-5-26 11:07:17

Starting the file scan:

Begin scan in 'F:\样本\83FB3659.rar'
F:\样本\83FB3659.rar
  [0] Archive type: RAR
  --> 83FB3659.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-26 11:09:17

继续启发

显示全部楼层 · 发表于 2007-5-26 11:34:49

加壳了啊？

麻烦！

我想用hips直接测试一下。

显示全部楼层 · 发表于 2007-5-26 11:35:50

KAV 602.621

显示全部楼层 · 发表于 2007-5-26 11:40:49

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Pabug.db

用户来源：互联网

软件版本：19.24.42

显示全部楼层 · 发表于 2007-5-26 11:45:31

2007-5-26 11:38:04       D:\YB\83FB3659\83FB3659.exe       Process is trying to inject module C:\Program Files\Common Files\Microsoft Shared\MSINFO\C8E62D48.dll into all processes. This behaviour is typical of some malicious programs.
2007-5-26 11:38:04       D:\YB\83FB3659\83FB3659.exe       Attempt to terminate process
2007-5-26 11:39:00       D:\YB\83FB3659\83FB3659.exe       Attempt to terminate process: successfully
2007-5-26 11:39:19       C:\WINDOWS\Help\C8E62D48.chm       Rollback
2007-5-26 11:39:19       C:\Program Files\Common Files\Microsoft Shared\MSINFO\C8E62D48.dat       Rollback
2007-5-26 11:39:20       C:\Program Files\Common Files\Microsoft Shared\MSINFO\C8E62D48.dll       Rollback
2007-5-26 11:38:04       D:\YB\83FB3659\83FB3659.exe       Rollback completed

显示全部楼层 · 发表于 2007-5-26 12:23:54

显示全部楼层 · 发表于 2007-5-26 12:56:24

Begin scan in 'D:\Documents and Settings\dell\桌面\83FB3659.rar'
D:\Documents and Settings\dell\桌面\
  83FB3659.rar
[0] Archive type: RAR
--> 83FB3659.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-26 18:09:27

已知，

坏事做绝的U盘病毒样本在此！

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

已知

本帖子中包含更多资源