[MD5: B76A14] 继续

woai_jolin

zxarps..exe : Not detected by Sandbox (Signature: W32/Suspicious_U.gen)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: W32/Suspicious_U.gen

[ General information ]
    * File length:        15143 bytes.
    * MD5 hash: 0fe90564a1a8cf864fcdb6c711de729c.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information
source only.

promised

你还在测压缩包的MD5
屡教不改
http://bbs.kafan.cn/viewthread.php?tid=105502&highlight=%2B7657F5%2B

[ 本帖最后由 promised 于 2007-7-17 20:32 编辑 ]

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\four.rar'
F:\病毒样本\four.rar
  [0] Archive type: RAR
  --> server.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> server.exe.bak
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> zxarps..exe
      [DETECTION] Contains signature of the SPR/Tool.Hackdns.2 program
  --> ¤p?¤U?ªÌ.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.NE.43
  --> ¤p­ï§L?­ì¥d±K??¨ú.exe
      [DETECTION] Is the Trojan horse TR/Kimin.AB
      [INFO]      The file was deleted!