异常奇怪的东西BA3B17

zane_xzz

Check system areas...
Check selected directories and files...
Object: avira avira.exe
        In archive: C:\Documents and Settings\Administrator\桌面\avira.rar
        Status: Virus detected
        Virus: Trojan-Dropper.Win32.Agent.bld (Engine A)
Object: avira.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Trojan-Dropper.Win32.Agent.bld (Engine A)
Analysis complete: 7/18/2007 13:47
    1 files checked
    1 infected files detected
    0 suspected files detected

woai_jolin

avira.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS

[ General information ]
    * Display message box (NULL) : Access violation at address
0040975F. Read of address 00000413..
    * File length:      2904052 bytes.
    * MD5 hash: ba3b17a0db672a8ea968941879c9c3d1.

[ Changes to filesystem ]
    * Creates file C:\WINDOWS\TEMP\temp1.exe.
    * Creates file C:\WINDOWS\TEMP\temp2.exe.

[ Signature Scanning ]
    * C:\WINDOWS\TEMP\temp1.exe (1048576 bytes) : no signature
detection.
    * C:\WINDOWS\TEMP\temp2.exe (398198 bytes) : no signature
detection.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information
source only.

This file is not flagged as malicious by the Norman Sandbox Information
Center. However, we can not guarantee that the file is harmless. If
you still suspect the file to be malicious and if you urgently need to
know for sure, please submit it to your local Norman support department
for manual analysis.