[f48009]反毒网关过滤~过卡巴

flowerpig

File information

File Name :	vip.exe
File Size :	95584 byte
File Type :	MS-DOS executable (EXE)
MD5 :	f480090c4af090c6024d36ccb2f1b9ee
SHA1 :	da39a3ee5e6b4b0d3255bfef95601890afd80709

Scanner results

Scanner results :	68% Scanner(17/25) found malware!
Scan time :	2007/07/31 12:33:52

A-Squared	3.0.0.123	2007.07.30	2007-07-30	Found nothing	3.843
AntiVir	7.4.0.54	6.39.0.200	2007-07-30	TR/Delphi.Downloader.Gen	2.313
Arcavir	1.0.4	200707301637	2007-07-30	Heur.Win32.I	1.202
Avast	1.0.8	000762-4	2007-07-30	Win32:Agent-GBT	3.037
AVG	7.5.47.442	269.10.23/924	2007-07-28	Found nothing	1.344
BitDefender	7.60825.702748	7.14118	2007-07-31	Generic.Onlinegames.5.9A875204	2.496
CA (VET)	8.4.0.24	31.1.5018	2007-07-31	Win32/Hitpop!generic trojan.	0.921
ClamAV	0.91.1	3827	2007-07-31	Trojan.Spy-5709	0.216
Dr.Web	4.33	2007.07.31	2007-07-31	MULDROP.Trojan	5.675
Ewido	4.0.0.2	2007.07.30	2007-07-30	Found nothing	3.553
F-Prot	3.16.16	2007.07.30	2007-07-30	Found nothing	0.378
F-Secure	5.51.6100	2007.07.31.01	2007-07-31	Found nothing	2.398
Ikarus	T3.1.1.12	2007.07.30.69285	2007-07-30	Trojan-Spy.Win32.Delf.JQ	9.847
Kaspersky	5.5.10	2007.07.31	2007-07-31	Found nothing	0.1
KingSoft	2007.6.20.249	2007.7.31	2007-07-31	Found nothing	0.918
McAfee	5.1.00	5086	2007-07-30	New Malware.aj	0.669
mks_vir	2.01	2007.07.30	2007-07-30	Heur.Win32	1.994
NOD32	2.70.7	2429	2007-07-30	probably a variant of Win32/Ge...	2.907
Norman	5.90.37	5.90	2007-07-30	W32/Suspicious_U.gen	2.449
Panda	9.00.00	2007.07.29	2007-07-29	Suspicious file	3.92
Sophos	551740	551740	2007-07-31	Mal/Packer	2.696
Symantec	1.3.0.24	20070730.016	2007-07-30	Found nothing	0.342
Trend Micro	8.500-1001	4.623.00	2007-07-29	TROJ_DELF.IVK	3.186
VBA32	3.12.2.2	20070730.1503	2007-07-30	Trojan-PSW.Game.39 (paranoid h...	53.828
VirusBuster	4.3.19:9	9.093.2/11.0	2007-07-30	Packed/Upack	0.98

NOTICE: It may be false positive by some scanners when they found a malware, so you should judge it by yourself.
微点报未知

[ 本帖最后由 flowerpig 于 2007-7-31 13:18 编辑 ]

mingwang69

BitDefender 7.60825.702748 7.14118 2007-07-31 Generic.Onlinegames.5.9A875204 2.496
不是报了吗？
sav过

flowerpig

原帖由 mingwang69 于 2007-7-31 13:14 发表
BitDefender 7.60825.702748 7.14118 2007-07-31 Generic.Onlinegames.5.9A875204 2.496
不是报了吗？
sav过

看错了.呵呵.

andylau

實機上的 Arcavir 不報

啟發已開到最高

mingwang69

Panda 9.00.00 2007.07.29 2007-07-29 Suspicious file
panda08的正式版出来了，谁去试试，看看牛不。
我用07感觉有点怪……压缩包扫描无毒，解开监控报……

flowerpig

to mingwang69
启发开到最高. 熊猫就报的多了, 否则不怎么报,不过误报也多

king6808

瑞SB又挂
AhnLab-V3 2007.7.31.1 2007.07.31 -
AntiVir 7.4.0.54 2007.07.30 TR/Delphi.Downloader.Gen
Authentium 4.93.8 2007.07.30 -
Avast 4.7.997.0 2007.07.30 Win32:Delf-ECV
AVG 7.5.0.476 2007.07.30 -
BitDefender 7.2 2007.07.31 Generic.Onlinegames.5.9A875204
CAT-QuickHeal 9.00 2007.07.30 (Suspicious) - DNAScan
ClamAV 0.91 2007.07.31 -
DrWeb 4.33 2007.07.31 MULDROP.Trojan
eSafe 7.0.15.0 2007.07.29 Suspicious Trojan/Worm
eTrust-Vet 31.1.5018 2007.07.31 -
Ewido 4.0 2007.07.30 -
FileAdvisor 1 2007.07.31 -
Fortinet 2.91.0.0 2007.07.31 -
F-Prot 4.3.2.48 2007.07.30 -
F-Secure 6.70.13030.0 2007.07.31 W32/Suspicious_U.gen.dropper
Ikarus T3.1.1.8 2007.07.31 Trojan-Spy.Win32.Delf.JQ
Kaspersky 4.0.2.24 2007.07.31 Trojan-Spy.Win32.Agent.pn
McAfee 5086 2007.07.30 New Malware.aj
Microsoft 1.2704 2007.07.31 TrojanDownloader:Win32/ProcessInjector.gen
NOD32v2 2429 2007.07.30 probably a variant of Win32/Genetik
Norman 5.80.02 2007.07.30 -
Panda 9.0.0.4 2007.07.31 Suspicious file
Prevx1 V2 2007.07.31 -
Rising 19.34.11.00 2007.07.31 -
Sophos 4.19.0 2007.07.26 Mal/Packer
Sunbelt 2.2.907.0 2007.07.31 -
Symantec 10 2007.07.31 -
TheHacker 6.1.7.159 2007.07.31 -
VBA32 3.12.2.2 2007.07.30 suspected of Trojan-PSW.Game.39 (paranoid heuristics)
VirusBuster 4.3.26:9 2007.07.30 -
Webwasher-Gateway 6.0.1 2007.07.31 Trojan.Delphi.Downloader.Gen

1688388728

程序:
D:\病毒库\VIP\VIP.EXE
木马程序生成以下文件:
1) D:\MYPLAYER.COM
2) C:\WINDOWS\SYSTEM32\INF\SCRSYS070731.SCR
是否删除木马程序及其衍生物?

taihuxian

Virus: Trojan-Spy.Win32.Agent.pn

Virus found while downloading Web content.

Address: bbs.kafan.cn

buycard

原帖由 mingwang69 于 2007-7-31 13:29 发表
Panda 9.00.00 2007.07.29 2007-07-29 Suspicious file
panda08的正式版出来了，谁去试试，看看牛不。
我用07感觉有点怪……压缩包扫描无毒，解开监控报……

监控的启发式是Truprevent，手动扫描的启发式在 “扫描”里面需要设置。