这个是毒吗?

lsyer

雨伞很明确的和我说~

File ID	Filename	Size (Byte)	Result
269305	taskmgr.exe	240.7 KB	FALSE POSITIVE

jxxfcwb

AhnLab-V3 2007.7.31.1 2007.07.31 -
AntiVir 7.4.0.54 2007.07.31 -
Authentium 4.93.8 2007.07.30 Possibly a new variant of W32/Threat-SysVenFakP-based!Maximus
Avast 4.7.1029.0 2007.07.31 Win32:PePatch-EI
BitDefender 7.2 2007.07.31 Backdoor.Eggdrop.AP
CAT-QuickHeal 9.00 2007.07.31 (Suspicious) - DNAScan
ClamAV 0.91 2007.07.31 -
eTrust-Vet 31.1.5019 2007.07.31 -
Ewido 4.0 2007.07.31 -
FileAdvisor 1 2007.07.31 -
Fortinet 2.91.0.0 2007.07.31 BackDoor.U!tr
F-Prot 4.3.2.48 2007.07.30 W32/Threat-SysVenFakP-based!Maximus
F-Secure 6.70.13030.0 2007.07.31 -
Kaspersky 4.0.2.24 2007.07.31 -
McAfee 5086 2007.07.30 Generic BackDoor.u
Microsoft 1.2704 2007.07.31 -
NOD32v2 2429 2007.07.30 probably a variant of Win32/Agent
Norman 5.80.02 2007.07.31 -
Panda 9.0.0.4 2007.07.31 Bck/Agent.FOE
Rising 19.34.12.00 2007.07.31 -
Sophos 4.19.0 2007.07.26 -
Sunbelt 2.2.907.0 2007.07.31 Email-Worm.Win32.GOPworm.196
Symantec 10 2007.07.31 Backdoor.Trojan
TheHacker 6.1.7.159 2007.07.31 -
VBA32 3.12.2.2 2007.07.30 -
VirusBuster 4.3.26:9 2007.07.31 -
Webwasher-Gateway 6.0.1 2007.07.31 Win32.NewMalware.IK!246472

woai_jolin

taskmgr.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS

[ General information ]
    * Decompressing PEC2.
    * Display message box (Entry Point Not Found) : The procedure entry
point [any] could not be located in the dynamic link library
Secur32.dll..
    * File length:       246472 bytes.
    * MD5 hash: e400a151563c2c1ea5ddec7c6bb8db6c.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information
source only.

This file is not flagged as malicious by the Norman Sandbox Information
Center. However, we can not guarantee that the file is harmless. If
you still suspect the file to be malicious and if you urgently need to
know for sure, please submit it to your local Norman support department
for manual analysis.

544318625

瑞星挂了,马上上报

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

tracydk

ArcaMicroScan - Scanning report [2007.08.02 11:24:26]
Base date : 2007.08.01 08:03:30





[Scanning : F:\virus]





Scanned objects : 3

Infected objects : 0

tracydk

看来Arcabit在样本区误报很少啊

gho

执行了，主防未报