不夸张你不相信[MD5: 191933 C46DE8 989CB4]

显示全部楼层 · 发表于 2007-6-12 10:26:46

毒网产物，当时抓下来了，再上就么有了，难道我见鬼了

显示全部楼层 · 发表于 2007-6-12 10:30:34

好东西，上报看看。。。

显示全部楼层 · 发表于 2007-6-12 10:35:27

都不行呀。。
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.zip'
C:\Documents and Settings\Administrator\My Documents\
  virus.zip
[0] Archive type: ZIP
--> MSJate.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> MSJete.dll
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> MSJete.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年6月11日  19:37
Used time: 00:06 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   3 viruses and/or unwanted programs were found
   2 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   1 Archives were scanned
   4 Warnings
   0 Notes
   0 Hidden objects were found

扫描日志
NOD32版本 2323 (20070611) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\virus.zip
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 11.6.2007  时间：19:37:24
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\virus.zip
C:\Documents and Settings\Administrator\My Documents\ ?
?virus.zip >>ZIP >>MSJate.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?virus.zip >>ZIP >>MSJete.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?virus.zip >>ZIP >>MSJete.exe - 是正常的
已扫描的文件数目：3
已发现的病毒数目：0
完成时间： 19:37:24 总扫描时间：0 秒 (00:00:00)

[Scan path] C:\Documents and Settings\Administrator\My Documents\virus.zip
>C:\Documents and Settings\Administrator\My Documents\virus.zip\MSJate.dll - Ok
>C:\Documents and Settings\Administrator\My Documents\virus.zip\MSJete.dll - Ok
>C:\Documents and Settings\Administrator\My Documents\virus.zip\MSJete.exe - Ok
C:\Documents and Settings\Administrator\My Documents\virus.zip - Ok

显示全部楼层 · 发表于 2007-6-12 10:35:49

隐藏文件，不好对付
费尔不报

显示全部楼层 · 发表于 2007-6-12 10:41:07

红伞3个

显示全部楼层 · 发表于 2007-6-12 10:42:01

显示全部楼层 · 发表于 2007-6-12 10:42:21

自动退出。好像见过。

显示全部楼层 · 发表于 2007-6-12 10:44:45

解压之后，浏览器自动关闭

显示全部楼层 · 发表于 2007-6-12 10:51:00

我的怎么没被关闭

显示全部楼层 · 发表于 2007-6-12 10:54:43

我的怎么什么反应都没有

[病毒样本] 不夸张你不相信[MD5: 191933 C46DE8 989CB4]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 #8 红心王子的帖子

[病毒样本] 不夸张你不相信[MD5: 191933 C46DE8 989CB4]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 #8 红心王子 的帖子

回复 #8 红心王子的帖子