最新autorun.ar变种

显示全部楼层 · 发表于 2007-5-30 22:58:32

昨天这里最新的还是z，今天已经ar了，慢慢玩吧

显示全部楼层 · 发表于 2007-5-30 23:01:25

Starting the file scan:

Begin scan in 'F:\样本\gmsex.zip'
F:\样本\gmsex.zip
  [0] Archive type: ZIP
  --> gmsex.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-30 23:05:01

是不是修改了母体，可是忘了对生成物下功夫？

显示全部楼层 · 发表于 2007-5-30 23:21:27

关注别人测试

显示全部楼层 · 发表于 2007-5-30 23:21:50

[Scan path] C:\Documents and Settings\Administrator\桌面\gmsex.zip
>>>>>>C:\Documents and Settings\Administrator\桌面\gmsex.zip\gmsex.exe infected with Trojan.PWS.Ran.origin
C:\Documents and Settings\Administrator\桌面\gmsex.zip - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 76 Kb/s
Scan time: 00:00:00

显示全部楼层 · 发表于 2007-5-30 23:23:29

AVAST miss

显示全部楼层 · 发表于 2007-5-30 23:53:40

meishenme
detected: virus Virus.Win32.AutoRun.ar URL: http://bbs.kafan.cn/attachment.p ... ct//PE_Patch.MaskPE

显示全部楼层 · 发表于 2007-5-31 00:05:18

完美配合

显示全部楼层 · 发表于 2007-5-31 00:59:28

在FF见到这个东西，现在报的还不多

显示全部楼层 · 发表于 2007-5-31 04:41:49

[病毒样本] 最新autorun.ar变种

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源