一个毒

显示全部楼层 · 发表于 2007-5-28 18:30:23

试试

显示全部楼层 · 发表于 2007-5-28 18:32:32

BD 飘过

显示全部楼层 · 发表于 2007-5-28 18:32:57

卡巴7，kv不报

显示全部楼层 · 发表于 2007-5-28 18:34:14

欢迎所有auto毒来毒害几乎所有nod的电脑……
因为它always飘过了……

显示全部楼层 · 发表于 2007-5-28 19:15:50

The file 'winfx32.exe' has been determined to be 'UNDER ANALYSIS'

显示全部楼层 · 发表于 2007-5-28 20:58:06

费尔报

显示全部楼层 · 发表于 2007-5-28 21:13:30

Hello,

Thanks for taking the time to submit your samples to the Norman
Sandbox Information Center.  Customer delight is our top priority at
Norman.  With that in mind we have developed Sandbox Solutions for
organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to
analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test
environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

&#26700 : Not detected by Sandbox (Signature: W32/Gamania.dam)

[ DetectionInfo ]
* Sandbox name: NO_MALWARE
* Signature name: W32/Gamania.dam

[ General information ]
* Decompressing UPX.
* Accesses executable file from resource section.
* Creating several executable files on hard-drive.
* File length:       36435 bytes.
* MD5 hash: 23d80e8e5c2b7eb19e006e80c9bd4bfb.

[ Changes to filesystem ]
* Creates file C:\Program Files\Common Files\Microsoft Shared\MSINFO\37F873E8.dll.
* Deletes file C:\Program Files\Common Files\Microsoft Shared\MSINFO\37F873E8.dat.
* Creates file C:\Program Files\Common Files\Microsoft Shared\MSINFO\37F873E8.dat.
* Creates file C:\WINDOWS\Help\37F873E8.chm.

[ Process/window information ]
* Creates a mutex E37F873E8.

[ Signature Scanning ]
* C:\WINDOWS\Help\37F873E8.chm (36435 bytes) : no signature detection.

(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

************************************
Sent from an unmonitored email address.
Please DO NOT reply.
************************************

[ 本帖最后由 mhj144007 于 2007-5-28 21:18 编辑 ]

显示全部楼层 · 发表于 2007-5-28 21:21:59

启发了

显示全部楼层 · 发表于 2007-5-28 21:29:38

红伞报

显示全部楼层 · 发表于 2007-5-28 21:53:33

运行了，微点没反映，右键的“打开”中文字变成了“OPEN”，原来的“打开”下移了一格。

[病毒样本] 一个毒

本帖子中包含更多资源

PASS

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源