查看: 1874|回复: 9
收起左侧

[病毒样本] b21fee,怎么看都像是误报!

[复制链接]
欠妳緈諨
发表于 2007-9-6 23:21:13 | 显示全部楼层 |阅读模式

文件名称 :  task.exe
文件大小 :  10240 byte
文件类型 :  MS-DOS executable (EXE), OS/2 or MS Windows
MD5 :  b21fee5dffc1711e338790c8da29a31b
SHA1 :  9a0e31dd540b470b380db6854caacfacc63ea6f2

扫描结果
扫描结果 :  6%的杀软(2/31)报告发现病毒
时间 :  2007/09/06 23:16:20 (CST)
软件名称引擎版本
病毒库版本
病毒库时间
扫描结果
时间
a-squared3.0.0.1232007.09.052007-09-05-
3.809
Arcavir1.0.42007090611202007-09-06-
1.242
AVAST1.0.8000773-12007-09-06-
3.042
AVG7.5.48.442269.13.7/9922007-09-06PSW.Legendmir.GMR
1.452
BitDefender7.60825.8628727.146432007-09-06-
3.144
CA (VET)8.4.0.2431.1.51142007-09-06-
0.832
ClamAV 0.91.141692007-09-06-
0.121
Comodo2.112.0.0.2762007-09-06-
1.050
ewido4.0.0.22007.09.062007-09-06-
2.008
F-SECURE5.51.61002007.09.06.052007-09-06-
2.603
IKARUST3.1.1.122007.09.06.694582007-09-06-
1.255
MKS_VIR2.012007.09.052007-09-05-
1.964
NOD322.70.825092007-09-06-
0.048
nProtect2007-09-06.00434952007-09-06-
9.915
QuickHeal9.002007.09.062007-09-06-
2.183
SOPHOS2.49.14.212007-09-06-
2.415
The Hacker6.1.9v001792007-09-06-
0.706
VBA323.12.2.420070906.04412007-09-06-
0.686
VirusBuster4.3.19:99.102.1/11.02007-09-06-
1.019
冰岛杀毒3.16.162007.09.062007-09-06-
0.453
卡巴斯基5.5.102007.09.062007-09-06-
0.066
大蜘蛛4.332007.09.062007-09-06-
4.879
小红伞7.6.0.56.39.1.992007-09-06TR/Tiny.10240.A
2.300
江民杀毒10.00.6502007.09.062007-09-06-
0.747
熊猫卫士9.04.03.00012007.09.052007-09-05-
3.335
瑞星19.019.39.32.002007-09-06-
2.014
诺曼5.91.075.902007-09-06-
3.126
赛门铁克1.3.0.2420070905.0232007-09-05-
0.413
趋势8.500-10014.697.002007-09-05-
0.073
迈克菲5.2.0051132007-09-05-
0.886
金山毒霸2007.6.20.2492007.9.62007-09-06-
0.910
注意: 就算报告发现病毒,也可能是杀软误报,请根据查毒结果自行判

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
自由
发表于 2007-9-6 23:22:55 | 显示全部楼层
我不会用五笔

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
平淡
发表于 2007-9-6 23:23:00 | 显示全部楼层
驱逐舰没有报
平淡
发表于 2007-9-6 23:32:08 | 显示全部楼层



AhnLab-V3
2007.9.5.02007.09.06-
AntiVir7.6.0.52007.09.06TR/Tiny.10240.A
Authentium4.93.82007.09.06-
Avast4.7.1029.02007.09.06-
AVG7.5.0.4852007.09.06PSW.Legendmir.GMR
BitDefender7.22007.09.06-
CAT-QuickHeal9.002007.09.06-
ClamAV0.91.22007.09.06-
DrWeb4.332007.09.06-
eSafe7.0.15.02007.09.04suspicious Trojan/Worm
eTrust-Vet31.1.51142007.09.06-
Ewido4.02007.09.06-
FileAdvisor12007.09.06-
Fortinet3.11.0.02007.09.06-
F-Prot4.3.2.482007.09.06-
F-Secure6.70.13030.02007.09.06-
IkarusT3.1.1.122007.09.06-
Kaspersky4.0.2.242007.09.06-
McAfee51132007.09.05-
Microsoft1.28032007.09.06-
NOD32v225092007.09.06-
Norman5.80.022007.09.06-
Panda9.0.0.42007.09.06Suspicious file
Prevx1V22007.09.06-
Rising19.39.32.002007.09.06-
Sophos4.21.02007.09.06-
Sunbelt2.2.907.02007.09.06-
Symantec102007.09.06-
TheHacker6.1.9.1792007.09.06-
VBA323.12.2.42007.09.06-
VirusBuster4.3.26:92007.09.06-
Webwasher-Gateway6.0.12007.09.06Trojan.Tiny.10240.A

熊猫报了
taihuxian
发表于 2007-9-7 06:46:27 | 显示全部楼层
TR/Tiny.10240.A
雪中冰
发表于 2007-9-7 08:53:23 | 显示全部楼层
卡巴没反应
wangjay1980
发表于 2007-9-7 09:00:34 | 显示全部楼层
Hello,

task.exe_

No malicious code were found in these files.
曲中求
发表于 2007-9-7 18:46:13 | 显示全部楼层
A listing of files alongside their results can be found below:

File ID  Filename  Size (Byte) Result
994781  task.exe  10 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
task.exe  MALWARE

The file 'task.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Tiny.10240.A. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.39.01.71.


Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... mp;incidentid=77815

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... DdhLG0rIgRZVzTfJTU8


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------
风野胤
发表于 2007-9-7 18:47:20 | 显示全部楼层
卡巴和红伞的分析师。。。。。。。
欠妳緈諨
 楼主| 发表于 2007-9-7 19:35:34 | 显示全部楼层
卡巴PK AVIRA
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-11 16:31 , Processed in 0.136959 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表