本帖最后由 wjcharles 于 2011-10-16 03:29 编辑
密码：123
nis2012 sonar kill
完整路径: 不可用
____________________________
____________________________
在电脑上的创建时间 2011/10/16 ( 2:49:06 )
上次使用时间 2011/10/16 ( 2:49:06 )
启动项目 否
已启动 是
____________________________
____________________________
极少用户信任的文件
诺顿社区中有不到 5 名用户使用了此文件。
____________________________
极新的文件
该文件已在不到 1 周前发行。
____________________________
高
此文件具有高风险。
____________________________
威胁详细信息
SONAR 主动防护监视电脑上的可疑程序活动。
____________________________
源文件:
winrar.exe
创建的文件:
asdf.exe
____________________________
文件操作
文件: c:\Users\ssHss\Desktop\asdf\asdf.exe
已删除
____________________________
系统设置操作
事件: 进程启动 (Performed by c:\users\sshss\desktop\asdf\asdf.exe, PID:7548)
未采取操作
____________________________
文件指纹 - SHA:
不可用
____________________________
文件指纹 - MD5:
不可用
____________________________
VT Community Sign in ▼ My account ▼ Sign outSigning out...  | Languages ▼ |
VirusTotal's website has changed, we need new translations, do you feel like helping the community?
info@virustotal.com
Sign in to VT Community
Safety ratings and user comments (disinfection, in-the-wild locations, reverse engineering reports, etc.) on malware and URLs, free and easy.
| email | | | password | | | Keep me logged in | | [size=0.8em]Sign in
Signing in, please wait...
| | Login failed, please try again |
Edit my profile
View my profile
Inbox
|  | Virustotal is a service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information... |
[size=0.9em] 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name:
asd.rar
Submission date:
2011-10-15 19:13:25 (UTC)
Current status:
finished
Result:
2/43 (4.7%)
| VT Community
[size=0.8em]not reviewed[size=0.8em] Safety score: - |
| Antivirus | Version | Last Update | Result | | AhnLab-V3 | 2011.10.13.00 | 2011.10.13 | - | | AntiVir | 7.11.15.252 | 2011.10.13 | TR/Crypt.XPACK.Gen2 | | Antiy-AVL | 2.0.3.7 | 2011.10.13 | - | | Avast | 6.0.1289.0 | 2011.10.13 | - | | AVG | 10.0.0.1190 | 2011.10.13 | - | | BitDefender | 7.2 | 2011.10.13 | - | | ByteHero | 1.0.0.1 | 2011.09.23 | - | | CAT-QuickHeal | 11.00 | 2011.10.13 | - | | ClamAV | 0.97.0.0 | 2011.10.13 | - | | Commtouch | 5.3.2.6 | 2011.10.13 | - | | Comodo | 10440 | 2011.10.13 | - | | DrWeb | 5.0.2.03300 | 2011.10.12 | - | | Emsisoft | 5.1.0.11 | 2011.10.13 | - | | eSafe | 7.0.17.0 | 2011.10.11 | - | | eTrust-Vet | 36.1.8617 | 2011.10.13 | - | | F-Prot | 4.6.5.141 | 2011.10.13 | - | | F-Secure | 9.0.16440.0 | 2011.10.13 | - | | Fortinet | 4.3.370.0 | 2011.10.13 | - | | GData | 22 | 2011.10.13 | - | | Ikarus | T3.1.1.107.0 | 2011.10.13 | - | | Jiangmin | 13.0.900 | 2011.10.12 | - | | K7AntiVirus | 9.115.5278 | 2011.10.13 | - | | Kaspersky | 9.0.0.837 | 2011.10.13 | - | | McAfee | 5.400.0.1158 | 2011.10.13 | FakeAlert-GA.gen.l | | McAfee-GW-Edition | 2010.1D | 2011.10.13 | - | | Microsoft | 1.7702 | 2011.10.13 | - | | NOD32 | 6541 | 2011.10.13 | - | | Norman | 6.07.11 | 2011.10.13 | - | | nProtect | 2011-10-13.01 | 2011.10.13 | - | | Panda | 10.0.3.5 | 2011.10.13 | - | | PCTools | 8.0.0.5 | 2011.10.13 | - | | Prevx | 3.0 | 2011.10.15 | - | | Rising | 23.79.03.02 | 2011.10.13 | - | | Sophos | 4.70.0 | 2011.10.13 | - | | SUPERAntiSpyware | 4.40.0.1006 | 2011.10.13 | - | | Symantec | 20111.2.0.82 | 2011.10.13 | - | | TheHacker | 6.7.0.1.322 | 2011.10.13 | - | | TrendMicro | 9.500.0.1008 | 2011.10.13 | - | | TrendMicro-HouseCall | 9.500.0.1008 | 2011.10.13 | - | | VBA32 | 3.12.16.4 | 2011.10.13 | - | | VIPRE | 10749 | 2011.10.13 | - | | ViRobot | 2011.10.13.4717 | 2011.10.13 | - | | VirusBuster | 14.1.11.0 | 2011.10.13 | - |
Additional information
Show all
| | MD5 : 40b3f6f2a2e7e5c637c2ff19db7b2859 | | SHA1 : 51ea27abbf8335cbed2adb753512d0875551ed0f | | SHA256: 34387a2eda2241d1638629bb36eb69ed9b618fefc0f1a16b46d4bfa698332b12 |
文件信息
扫描结果扫描结果 : | 30%的杀软(11/37)报告发现病毒 | 时间 : | 2011/10/16 03:23:40 (CST) |
软件名称  | 引擎版本 | 病毒库版本 | | 扫描结果 | | | a-squared | 5.1.0.4 | 20111016030157 | 2011-10-16 | -
| 0.554 | | AntiVir | 8.2.6.84 | 7.11.16.18 | 2011-10-14 | TR/Crypt.XPACK.Gen2
| 0.326 | | Arcavir | 2011 | 201110150204 | 2011-10-15 | -
| 2.862 | | Authentium | 5.1.1 | 201110151401 | 2011-10-15 | -
| 1.574 | | AVAST! | 4.7.4 | 111015-1 | 2011-10-15 | [url=http://v.virscan.org/Win32:Cycbot-NJ%20[Trj].html]Win32:Cycbot-NJ [Trj][/url]
| 0.142 | | AVG | 8.5.850 | 271.1.1/3941 | 2011-10-06 | -
| 0.264 | | BitDefender | 7.90123.9293736 | 7.39470 | 2011-10-15 | -
| 4.692 | | ClamAV | 0.97.1 | 13803 | 2011-10-15 | -
| 0.892 | | Comodo | 5.1 | 10459 | 2011-10-15 | -
| 1.907 | | CP Secure | 1.3.0.5 | 2011.10.15 | 2011-10-15 | -
| 0.002 | | Dr.Web | 5.0.2.3300 | 2011.10.16 | 2011-10-16 | BackDoor.Gbot.235
| 15.508 | | F-Prot | 4.6.2.117 | 20111015 | 2011-10-15 | W32/Goolbot.K3.gen!Eldorado (generic, not disinfectable)
| 0.801 | | F-Secure | 7.02.73807 | 2011.10.15.02 | 2011-10-15 | [url=http://v.virscan.org/Backdoor.Win32.Gbot.por%20[AVP].html]Backdoor.Win32.Gbot.por [AVP][/url]
| 0.227 | | GData | 22.2438 | 20111016 | 2011-10-16 | -
| 0.114 | | Ikarus | T3.1.32.20.0 | 2011.10.15.79588 | 2011-10-15 | -
| 4.925 | | Microsoft | 1.7702 | 2011.10.15 | 2011-10-15 | Trojan:Win32/Malagent
| 5.063 | | NOD32 | 3.0.21 | 6545 | 2011-10-15 | a variant of Win32/Kryptik.TXV trojan
| 0.036 | | Norman | 6.07.11 | 6.07.00 | 2011-09-17 | -
| 18.018 | | nProtect | 20111015.01 | 12997420 | 2011-10-15 | -
| 7.678 | | Quick Heal | 11.00 | 2011.10.14 | 2011-10-14 | -
| 3.255 | | Sophos | 3.24.4 | 4.70 | 2011-10-16 | -
| 4.372 | | Sunbelt | 3.9.2513.2 | 10770 | 2011-10-15 | -
| 1.219 | | The Hacker | 6.7.0.1 | v00323 | 2011-10-15 | -
| 0.598 | | VBA32 | 3.12.16.4 | 20111014.1938 | 2011-10-14 | BScope.Cycbot.1212
| 4.244 | | ViRobot | 20111015 | 2011.10.15 | 2011-10-15 | -
| 0.334 | | VirusBuster | 5.4.0.7 | 14.1.13.0/6529970 | 2011-10-15 | -
| 0.002 | | 卡巴斯基 | 5.5.10 | 2011.10.15 | 2011-10-15 | Backdoor.Win32.Gbot.por
| 0.067 | | 安博士V3 | 2011.10.15.01 | 2011.10.15 | 2011-10-15 | Trojan/Win32.Zbot
| 2.222 | | 安天 | 2.0.18 | 20111016.13250693 | 2011-10-16 | -
| 0.897 | | 江民杀毒 | 13.0.900 | 2011.10.15 | 2011-10-15 | -
| 2.068 | | 熊猫卫士 | 9.05.01 | 2011.10.15 | 2011-10-15 | -
| 2.631 | | 瑞星 | 20.0 | 23.79.04.02 | 2011-10-14 | -
| 2.710 | | 赛门铁克 | 1.3.0.24 | 20111014.002 | 2011-10-14 | -
| 0.244 | | 趋势科技 | 9.500-1005 | 8.500.02 | 2011-10-15 | -
| 0.054 | | 迈克菲 | 5400.1158 | 6500 | 2011-10-15 | FakeAlert-GA.gen.l
| 10.763 | | 金山毒霸 | 2009.2.5.15 | 2011.10.15.9 | 2011-10-15 | -
| 1.013 | | 飞塔 | 4.2.257 | 14.238 | 2011-10-15 | -
| 0.112 |
■Heuristic/Suspicious ■Exact
注意: 就算报告发现病毒，也可能是杀软误报，请根据查毒结果自行判断
|
发表于 2011-10-16 03:26:17
