|
雨露
管理员
DOS非常爱好者
积分 6209
发帖 2598
注册 2006-1-20
状态 离线
|
『楼 主』:
这个图里面几个真的是木马?
使用 LLM 解释/回答一下
这是我用木马克星扫描出来的,几个是真正的木马?
第一个好像是"阿飞解码器"
第二个好像是虚拟光驱
再下一个是灰鸽子
再下下一个是UCDOS7.33.
看来这几天不能闲了!<img src="images/smilies/face-smile-big.png" align="absmiddle" border="0">
Last edited by afnspy on 2006-6-28 at 22:37 ]
This is what I scanned with Trojan Killer. How many are real trojans?
The first one seems to be "A Fei Decoder"
The second one seems to be Virtual CD-ROM
Next one is Grey Hound
Next one is UCDOS 7.33.
It seems I can't be idle these days! :D
Last edited by afnspy on 2006-6-28 at 22:37 ]
附件
1:  22.GIF (2006-6-28 22:33, 20.69 KiB, 下载附件所需积分 1 点
,下载次数： 2)
|
|
|
 2006-6-28 22:32 |
|
|
electronixtar
铂金会员
积分 7493
发帖 2672
注册 2005-9-2
状态 离线
|
『第 2 楼』:
使用 LLM 解释/回答一下
晕system.exe，telnets.exe，saveword.dll，这些木马名字太没文化了
Hey, the names of these trojans like system.exe, telnets.exe, saveword.dll are so uncreative.
|
C:\>BLOG http://initiative.yo2.cn/
C:\>hh.exe ntcmds.chm::/ntcmds.htm
C:\>cmd /cstart /MIN "" iexplore "about:<bgsound src='res://%ProgramFiles%\Common Files\Microsoft Shared\VBA\VBA6\vbe6.dll/10/5432'>" |
|
|
2006-6-28 23:05 |
|
|
Michael
钻石会员
积分 10046
发帖 3039
注册 2002-11-11
状态 离线
|
『第 3 楼』:
使用 LLM 解释/回答一下
呵呵，这些名字是挺无知的，不过我发现过的最无知的一个是添加了一个服务在系统中，而此服务的描述是“微软。。。。。”，呵呵，Windows里怎么会出现“微软”，立即手动删除之，后来上网查了一下，也是灰鸽子。
真想提醒一下木马作者，Microsoft不怎么把自己称作“微软”的。
Hehe, these names are quite ignorant, but the most ignorant one I found is adding a service in the system, and the description of this service is "Microsoft......" he he, how can "Microsoft" appear in Windows, immediately delete it manually, and later checked online, it was also a GreyHound.
Really want to remind the Trojan author, Microsoft doesn't call itself "Microsoft" that much.
|
简单就是美 |
|
|
2006-6-29 11:00 |
|
|
fastslz
铂金会员
DOS一根葱
积分 5493
发帖 2315
注册 2006-5-1
来自 上海
状态 离线
|
『第 4 楼』:
使用 LLM 解释/回答一下
Originally posted by Michael at 2006-6-29 11:00:
真想提醒一下木马作者，Microsoft不怎么把自己称作“微软”的。
我是这么认为的：查木马对高手太简单了，对高手来说一看就知道此地无银三百两，但是对于菜鸟来说“这个是微软...不能删除”更甚至他根本就不知道Microsoft是什么东西，低水准的木马针对低水平使用者，木马作者更喜欢这些用户群<img src="images/smilies/face-wink.png" align="absmiddle" border="0">
Last edited by fastslz on 2006-6-29 at 20:04 ]
Originally posted by Michael at 2006-6-29 11:00:
Really want to remind the Trojan horse author, Microsoft doesn't call itself "Microsoft" much.
I think so: Detecting Trojan horses is too easy for experts. For experts, they can tell at a glance that there's something fishy here. But for novices, "This is Microsoft... can't delete" or even they don't know what Microsoft is at all. Low-level Trojans target low-level users, and Trojan authors prefer these user groups;)
Last edited by fastslz on 2006-6-29 at 20:04 ]
|
|
|
2006-6-29 12:48 |
|
|
glfdos
初级用户
积分 160
发帖 78
注册 2007-11-9
状态 离线
|
|
|
2007-11-9 15:38 |
|
|
shanliang8008
银牌会员
积分 1148
发帖 514
注册 2007-6-1
来自 河北
状态 离线
|
|
|
2007-11-12 13:00 |
|
|
shanliang8008
银牌会员
积分 1148
发帖 514
注册 2007-6-1
来自 河北
状态 离线
|
|
|
2007-11-12 13:05 |
|
|
ashore
新手上路
积分 4
发帖 2
注册 2007-11-24
状态 离线
|
『第 8 楼』:
使用 LLM 解释/回答一下
这些可以在设置里修改 的
你要是 不会改就用 AVG 吧 有破解版 的
These can be modified in the settings. If you don't know how to change, just use AVG. There is a cracked version.
|
|
|
2007-11-28 19:03 |
|
