红猪报喜，红伞过！

scottxzt

在program 下建立属名WINDOWNS 文件，包含了SYS32的子文件夹，再生成EXE文件了，要掌管系统了

scottxzt

原帖由 EQ2 于 2007-5-31 16:26 发表
单比真正的启发。。。红伞根本就不是nod32的对手。。。目前只看好BD和卡7的启发

看来你是扬眉吐气了，恭喜一下，我算是看透了，不带拦截系统的杀软，终究是跟着病毒后面转的，

喜欢智能性的拦截系统。

KAV-Longhorn

卡7飘了，上报.....

scottxzt

不知道卡吧和费尔的拦截如何

KAV-Longhorn

懒得试了，应该能拦的

pils

等会儿俺用tiny试试，看看真面目。

zengmingwh

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
595993  20070531.rar 15.33 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
595924  pig.exe  72 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
pig.exe  MALWARE

The file 'pig.exe' has been determined to be 'MALWARE'.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

scottxzt

[quote]原帖由 wubiaobing 于 2007-5-31 16:56 发表
等会儿俺用tiny试试，看看真面目。



支持一下，我在办公电脑中不能乱来。

pils

很烂的病毒。

发一个图吧。

[ 本帖最后由 wubiaobing 于 2007-5-31 17:16 编辑 ]

GBUser

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00047593.

A listing of files alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
595924          pig.exe          72 KB          MALWARE


Please find a detailed report concerning each individual sample below:
Filename         Result
pig.exe          MALWARE

The file 'pig.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------