可疑[MD5: 6D727A]

风野胤

很少报
virus total上三家报
但绝对可疑
有这么小的skype么
anyway 上报了

Antivirus Version Update Result AhnLab-V3 2007.6.30.0 06.29.2007 [td]no virus found AntiVir 7.4.0.37 06.29.2007 [td]no virus found Authentium 4.93.8 06.29.2007 [td]no virus found Avast 4.7.997.0 07.01.2007 [td]no virus found AVG 7.5.0.476 07.01.2007 [td]no virus found BitDefender 7.2 07.01.2007 [td]no virus found CAT-QuickHeal 9.00 06.30.2007 [td]no virus found ClamAV devel-20070416 07.01.2007 [td]no virus found DrWeb 4.33 07.01.2007 [td]no virus found eSafe 7.0.15.0 06.30.2007 suspicious Trojan/Worm eTrust-Vet 30.8.3752 06.29.2007 [td]no virus found Ewido 4.0 07.01.2007 [td]no virus found FileAdvisor 1 07.01.2007 [td]no virus found Fortinet 2.91.0.0 07.01.2007 [td]no virus found F-Prot 4.3.2.48 06.29.2007 [td]no virus found F-Secure 6.70.13030.0 07.01.2007 [td]no virus found Ikarus T3.1.1.8 07.01.2007 [td]no virus found Kaspersky 4.0.2.24 07.01.2007 [td]no virus found McAfee 5064 06.29.2007 [td]no virus found Microsoft 1.2701 07.01.2007 [td]no virus found NOD32v2 2367 07.01.2007 [td]no virus found Norman 5.80.02 06.29.2007 [td]no virus found Panda 9.0.0.4 07.01.2007 Suspicious file Sophos 4.19.0 06.28.2007 [td]no virus found Sunbelt 2.2.907.0 06.29.2007 [td]no virus found Symantec 10 07.01.2007 [td]no virus found TheHacker 6.1.6.140 06.28.2007 [td]no virus found VBA32 3.12.0.2 06.30.2007 [td]no virus found VirusBuster 4.3.23:9 07.01.2007 [td]no virus found Webwasher-Gateway 6.0.1 06.29.2007 Worm.Win32.ModifiedUPX.gen!90 (suspicious) Aditional Information File size: 58368 bytes MD5: 6d727abec329a2e8e853f541dec9be9a SHA1: 8dfa1658600314ba2009627f349ee35f70e062c7 packers: UPX packers: UPX packers: UPX

The EQs

连续用UPX压缩了

promised

2楼正解

风野胤

原帖由 EQ2 于 2007-7-1 23:24 发表
连续用UPX压缩了

对
所以更加可疑了
应该是蠕虫没有错的

promised

ESAFE瞎报的
这个没什么大问题

风野胤

原帖由 promised 于 2007-7-1 23:28 发表
ESAFE瞎报的
这个没什么大问题

是么
我只是觉得没事加这么多壳干嘛

The EQs

加壳有的是为了缩小体积。。。偶还见到过有不少软件专门加病毒常用到的壳

promised

提高压缩率
其实FSG压缩率是最可观的

wangjay1980

2007-7-1 JAY23:33:42        File: C:\Documents and Settings\Owner\×ÀÃæ\Ãâ·ÑÈ«ÇòÍøÂçµç»°.zip/Ãâ·ÑÈ«ÇòÍøÂçµç»°.exe//PE_Patch.UPX//UPX        ok        scanned

风野胤

那这个就只能算是强装软件了
还在我每个盘的根目录下都有一个
无语了