update.exe MD5: 994EFF8E6168481912504A3A89CD6642

显示全部楼层 · 发表于 2007-9-12 13:58:37

网吧游戏管理软件的升级程序卡巴一直报木马大家看看

显示全部楼层 · 发表于 2007-9-12 14:01:13

dr.web不报
运行了下，应该是误报

显示全部楼层 · 发表于 2007-9-12 14:06:09

显示全部楼层 · 发表于 2007-9-12 14:09:15

红伞报了。
Start of the scan: 2007年9月12日  14:09

Starting the file scan:

Begin scan in 'C:\BOOT\Update.rar'
C:\BOOT\Update.rar
  [0] Archive type: RAR
  --> Update.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.XC
   [INFO]    The file was moved to '474b82f9.qua'!

End of the scan: 2007年9月12日  14:09
Used time: 00:06 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-12 15:08:44

检测到：木马程序 Trojan-PSW.Win32.Delf.xc URL: http://bbs.kafan.cn/attachment.php?aid=126766//Update.exe//ASPack

显示全部楼层 · 发表于 2007-9-12 15:17:30

Scan performed at: 2007-9-12 15:16:45
Scanning Log
NOD32 version 2523 (20070912) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\Update.rar

Date: 12.9.2007 Time: 15:16:47
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\Update.rar
D:\Documents and Settings\EKINCHENG\桌面\Update.rar ?RAR ?Update.exe - probably a variant of Win32/PSW.Delf trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:16:48 Total scanning time: 1 sec (00:00:01)

感觉不是误报

显示全部楼层 · 发表于 2007-9-12 15:23:43

通过VirSCAN检测,56%的杀软(18/32)报告发现病毒,由此推断是病毒的可能性极大

显示全部楼层 · 发表于 2007-9-12 18:33:29

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4478
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\Update.exe

C:\Documents and Settings\uhthn\Desktop\Update.exe - Suspicious of Win32.Trojan-PSW.Game.8

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-12 18:55:29

PASS

update.exe MD5: 994EFF8E6168481912504A3A89CD6642

本帖子中包含更多资源

本帖子中包含更多资源