【f7f968】dll一个

显示全部楼层 · 发表于 2007-6-8 16:27:22

显示全部楼层 · 发表于 2007-6-8 16:27:39

费尔会报NSPM和ULPM

显示全部楼层 · 发表于 2007-6-8 16:30:34

我看过Ikarus报BehavesLike

显示全部楼层 · 发表于 2007-6-8 16:31:22

那个奥地利的杀软会乱报。。。。加了北斗的东西都会报viking。。。无语ing

显示全部楼层 · 发表于 2007-6-8 16:31:30

原帖由 jlennon 于 2007-6-8 16:30 发表
我看过Ikarus报BehavesLike

今天我刚看到过
http://bbs.kafan.cn/viewthread.php?tid=94502&page=1#pid1165404
PS:

Sunbelt	2.2.907.0	06.07.2007	Trojan.Packed.NsAnti
Symantec	10	06.08.2007	Trojan.Packed.NsAnti

[ 本帖最后由 promised 于 2007-6-8 16:32 编辑 ]

显示全部楼层 · 发表于 2007-6-8 16:32:48

赛门铁克不是一直用启发式报NSANTI？？

显示全部楼层 · 发表于 2007-6-8 16:33:32

我有个样本就这样报的，马上发。

[ 本帖最后由 jlennon 于 2007-6-8 16:37 编辑 ]

显示全部楼层 · 发表于 2007-6-8 16:39:32

群族查杀(即报gen)的部分诊断过程,套用的是启发式的规则...
猜想另一部分就应该是基因特征码本身

显示全部楼层 · 发表于 2007-6-8 17:23:46

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\wgso0.zip'
C:\Documents and Settings\Administrator\My Documents\
  wgso0.zip
[0] Archive type: ZIP
--> wgso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-8 17:26:49

[Scan path] C:\Documents and Settings\Administrator\桌面\wgso0.zip
>C:\Documents and Settings\Administrator\桌面\wgso0.zip\wgso0.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\wgso0.zip - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 15 Kb/s
Scan time: 00:00:01

[病毒样本] 【f7f968】dll一个

本帖子中包含更多资源

回复 #9 promised 的帖子

回复 #9 promised 的帖子

回复 #15 promised 的帖子