金山雲，誤報 有正確數字簽名的軟件

a256886572008

希望金山把這家的數字簽名，加入雲端白名單。

------------------------
comodo 官方說是誤報

Hi,

This is to inform you that false-positive with Kanbox_10040.exe   
(SHA1:7b08f19d826609744276018a9911640158a98eb5 ) has been fixed. You can
update to AV database Version 9216 of Comodo Internet Security Version
5.4.189822.1355 and confirm it.

Thanks and Regards
2011-06-29
Chunli.Chen

a445441

过微点扫描 。。。。。

hddu

2011-06-29 16:53:07    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*


2011-06-29 16:53:08    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\auctl.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:08    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\LiveUpdater.exe
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.exe


2011-06-29 16:53:08    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\disk_cache.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:09    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\Kanbox.exe
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.exe


2011-06-29 16:53:10    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\framework.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:10    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\job_dispatcher.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:11    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\down_surf.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:11    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\mg.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:11    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\netproxy.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:11    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\sys_mon.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:11    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\token_id.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:12    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\p2sp_manager.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:13    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\stat.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:13    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\syncbox.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:14    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\msvcm90.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:14    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\msvcp90.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:15    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\msvcr90.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:15    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\zlib1.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:15    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\rpt.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:15    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\CrashReporterSilent.exe
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.exe


2011-06-29 16:53:16    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\CrashReporter.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:19    创建注册表值      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
注册表名称:Kanbox
触发规则:所有程序规则->自动运行->*\SOFTWARE\Microsoft\Windows\CurrentVersion\Run*


2011-06-29 16:53:20    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\Locales\zh-CN.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:20    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\shellext\SyncStateExt.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:23    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\KanboxPropSheetExt.dll
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.dll


2011-06-29 16:53:30    修改文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\*菜单\*


2011-06-29 16:53:32    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\酷盘
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\*菜单\*


2011-06-29 16:53:34    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\酷盘\启动酷盘.lnk
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\*菜单\程序\*.lnk


2011-06-29 16:53:36    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\酷盘\卸载酷盘.lnk
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\*菜单\程序\*.lnk


2011-06-29 16:53:36    创建文件      操作:允许
进程路径:F:\virus\Kanbox_10040[1]\Kanbox_10040.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Kanbox Network\Kanbox\bin\uninst.exe
触发规则:所有程序规则->Documents and Settings设置（二）->?:\Documents and Settings\*\Application Data\*.exe

Nocria

Error

Kanbox_10040.part1.rar > RAR > Kanbox_10040.exe > NSIS > framework.dll - 压缩文件已损坏 － 文件无法解压。

小紫英

快盘的竞争对手

hx1997

ESET clean

留侯

大蜘蛛clean，文件加了壳：
Kanbox_10040.exe/___\KillProc.dll 已打包，方式： UPX

hzqedison

我找人跟进这个样本 应该很快就有结果

77171587

试试看吧