样本和衍生物

显示全部楼层 · 发表于 2007-6-1 12:18:12

好像挂了不少耶。。

样本送蜘蛛了。。

显示全部楼层 · 发表于 2007-6-1 12:18:57

下载的时候卡巴7没有反应
斧头KV不报
费尔报了，三个全是启发式

显示全部楼层 · 发表于 2007-6-1 12:24:32

Begin scan in 'D:\Documents and Settings\dell\桌面\新建文件夹'
D:\Documents and Settings\dell\桌面\新建文件夹\
D:\Documents and Settings\dell\桌面\新建文件夹\svchost.rar
  [0] Archive type: RAR
  --> svchost.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Themida). Please verify the origin of the file
   [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-1 17:25:57

显示全部楼层 · 发表于 2007-6-1 17:27:55

AVG Anti-Spyware 7.5 全无反应~

显示全部楼层 · 发表于 2007-6-1 17:59:30

themida。。。。。。nod32暂时脱不了这个壳。。。也没有杀软可以脱

显示全部楼层 · 发表于 2007-6-1 20:34:21

虽然没有卡巴快，不过现在看来，蜘蛛的反应速度还是可以接受。。

[Scan path] C:\Documents and Settings\Administrator\桌面\bruteforce-icq_170.rar
>>C:\Documents and Settings\Administrator\桌面\bruteforce-icq_170.rar\bruteforce-icq_170\bruteforce-icq.exe_\svchost.exe infected with Trojan.MulDrop.6439
>C:\Documents and Settings\Administrator\桌面\bruteforce-icq_170.rar\bruteforce-icq_170\bruteforce-icq.exe_ - archive contains infected objects
C:\Documents and Settings\Administrator\桌面\bruteforce-icq_170.rar - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\svchost.rar
>C:\Documents and Settings\Administrator\桌面\svchost.rar\svchost.exe infected with Trojan.MulDrop.6439
C:\Documents and Settings\Administrator\桌面\svchost.rar - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\BRUTEFORCE-ICQ.rar
>>C:\Documents and Settings\Administrator\桌面\BRUTEFORCE-ICQ.rar\BRUTEFORCE-ICQ.EXE\svchost.exe infected with Trojan.MulDrop.6439
>C:\Documents and Settings\Administrator\桌面\BRUTEFORCE-ICQ.rar\BRUTEFORCE-ICQ.EXE - archive contains infected objects
C:\Documents and Settings\Administrator\桌面\BRUTEFORCE-ICQ.rar - archive contains infected objects

显示全部楼层 · 发表于 2007-6-1 20:35:35

连蜘蛛都这么快。。。。偶快发疯了。。。。

显示全部楼层 · 发表于 2007-6-1 20:38:29

原帖由 蓝色牛仔裤 于 2007-6-1 20:34 发表
虽然没有卡巴快，不过现在看来，蜘蛛的反应速度还是可以接受。。

[Scan path] C:\Documents and Settings\Administrator\桌面\bruteforce-icq_170.rar
>>C:\Documents and Settings\Administrator ...

如果蜘蛛更新的话VBA32过一段时间应该能杀了

[病毒样本] 样本和衍生物

本帖子中包含更多资源

本帖子中包含更多资源

是不是加死了，报壳一个。

微点拦

本帖子中包含更多资源

浏览过的版块