【2E55CF】误报一只

显示全部楼层 · 发表于 2007-8-16 08:42:57

UPX 0.89.6 - 1.02 / 1.05 - 1.24 (Delphi) stub -> Markus & Laszlo

脱掉
|
\/

显示全部楼层 · 发表于 2007-8-16 08:43:30

诺顿

显示全部楼层 · 发表于 2007-8-16 08:47:00

看看报了什么
再运行看看到底是什么

显示全部楼层 · 发表于 2007-8-16 08:51:42

NOD 熊猫 IK 金山报

显示全部楼层 · 发表于 2007-8-16 08:53:30

这个

显示全部楼层 · 发表于 2007-8-16 08:58:24

微点没拦截

显示全部楼层 · 发表于 2007-8-16 09:19:27

脱不脱壳报的都一样
都是动态启发报的

主要是因为在windows文件夹下生成自身的行为比较猥琐
这个杀了也没什么

[ 本帖最后由风野胤于 2007-8-16 09:22 编辑 ]

显示全部楼层 · 发表于 2007-8-16 09:42:24

Start of the scan: 2007年8月16日  09:41

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\msspr.rar
  [0] Archive type: RAR
  --> msspr.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!
H:\AV-TEST\msspr_2.rar
  [0] Archive type: RAR
  --> msspr_2.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

End of the scan: 2007年8月16日  09:41
Used time: 00:19 min

The scan has been done completely.

   1 Scanning directories
   4 Files were scanned
   2 viruses and/or unwanted programs were found
   2 classified as suspicious:
   2 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-16 10:09:11

把自己放到WINDOWS目录下
比较可疑的了~~
报下就报下把

[ 本帖最后由 lsyer 于 2007-8-16 10:48 编辑 ]

[病毒样本] 【2E55CF】误报一只

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块