鸽子[md5:ca5f06]

mofunzone

来自avpclub，确定可运行
发完睡觉
File:           Server4.exe
Status:        
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5         ca5f0626aefb511f3c7cb778ac9e47cb
Packers detected:        
PE-ARMOR
Scanner results
Scan taken on 16 Jun 2007 07:49:26 (GMT)
A-Squared        
Found nothing
AntiVir        
Found HEUR/Crypted
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found nothing
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found nothing
NOD32        
Found nothing
Norman Virus Control        
Found Hupigon.gen98
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found nothing

啊弥陀佛

鸽子好啊，微点砍掉

kp2006

kv报gezi

wangjay1980

2007-6-16 JAY15:59:52        File: C:\Documents and Settings\Owner\×ÀÃæ\Server4.zip/Server4.exe//PE-Armor        ok        scanned
上报

detected: Trojan program Backdoor.Win32.Bifrose.kt File: C:\Documents and Settings\Owner\×ÀÃæ\Server4.zip/Server4.exe

[ 本帖最后由 wangjay1980 于 2007-6-16 17:41 编辑 ]

promised

又是PE-ARMOR

moonsilver

上报

aerbeisi

卡巴主动防御拦截。调用drwtsn32

promised

原帖由 aerbeisi 于 2007-6-16 16:07 发表
卡巴主动防御拦截。调用drwtsn32

drwtsn32可以被调用吗？

taihuxian

[WARNING] Contains suspicious code HEUR/Crypted!
  C:\WINDOWS\Temp\_avast4_\unp259531329.tmp
      [INFO] No action will be taken on the file.

aerbeisi

原帖由 promised 于 2007-6-16 16:14 发表

drwtsn32可以被调用吗？

你可以运行一下。