svchost.exe [md5:29e4d5]

显示全部楼层 · 发表于 2007-6-27 03:32:45

vba32啊啊啊啊啊啊啊啊！！！
File: svchost.exe
Status:
POSSIBLY INFECTED/MALWARE (Note: this file was only flagged as malware by heuristic detection(s). This might be a false positive. Therefore, results of this scan will not be stored in the database)
MD5: 29e4d553a045733db9acaa5f8327ebfa
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 26 Jun 2007 19:36:06 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found Trojan-PSW.Game.42 (paranoid heuristics) (probable variant)

显示全部楼层 · 发表于 2007-6-27 08:08:45

?       Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\...\svchost.exe : is suspected of Trojan-PSW.Game.42 (paranoid heuristics)
Program execution terminated by user

Directories    : 3    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 6
- scanned       : 1    -  scanned : 1    - scanned    : 6
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

Startup : 08:14:12 27-06-2007
End       : 08:14:15 27-06-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-27 08:15:43

刚给同学装vba32
开了最高启发的误报果然可怕

显示全部楼层 · 发表于 2007-6-27 08:15:49

咖啡飘过，但解压时被规则阻止

2007-6-27 8:20:56 已由访问保护规则禁止 ASUS-ZCQ C:\Program Files\WinRAR\WinRAR.exe E:\test\svchost\svchost.exe 防病毒标准保护:禁止伪装 Windows 进程已阻止的操作: 创建

显示全部楼层 · 发表于 2007-6-27 08:17:19

什么版本的
VBA32现在误报已经好很多了

显示全部楼层 · 发表于 2007-6-27 08:37:10

原帖由 promised 于 2007-6-27 08:17 发表
什么版本的
VBA32现在误报已经好很多了

让我开机看一下可能有点老了
对了是不是最近出了新版本

显示全部楼层 · 发表于 2007-6-27 08:41:15

原帖由 promised 于 2007-6-27 08:17 发表
什么版本的
VBA32现在误报已经好很多了

果然是很古老的版本
down新版本玩去了

显示全部楼层 · 发表于 2007-6-27 09:44:48

很老的那个版本误报是非常严重

显示全部楼层 · 发表于 2007-6-27 12:34:10

avk2007过

显示全部楼层 · 发表于 2007-6-27 13:17:33

ess pass上报

[病毒样本] svchost.exe [md5:29e4d5]

本帖子中包含更多资源

回复 #3 风野胤的帖子

回复 #7 风野胤的帖子

[病毒样本] svchost.exe [md5:29e4d5]

本帖子中包含更多资源

回复 #3 风野胤 的帖子

回复 #7 风野胤 的帖子

回复 #3 风野胤的帖子

回复 #7 风野胤的帖子