过卡巴，红伞，蜘蛛；微点无反应，金山报毒

seraphmm

是个汉化的书法真迹 反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2007.9.29.0	2007.09.28	Win-Trojan/Awq.95905.B
AntiVir	7.6.0.18	2007.09.28	-
Authentium	4.93.8	2007.09.28	-
Avast	4.7.1043.0	2007.09.28	Win32:Trojan-gen. {Other}
AVG	7.5.0.488	2007.09.27	Generic3.EHU
BitDefender	7.2	2007.09.28	Backdoor.Awq.B
CAT-QuickHeal	9.00	2007.09.28	(Suspicious) - DNAScan
ClamAV	0.91.2	2007.09.28	-
DrWeb	4.33	2007.09.28	-
eSafe	7.0.15.0	2007.09.23	Win32.Graybird
eTrust-Vet	31.2.5169	2007.09.27	Win32/VMalum.SUR
Ewido	4.0	2007.09.28	Backdoor.Awq.b
FileAdvisor	1	2007.09.28	High threat detected
Fortinet	3.11.0.0	2007.09.28	BDoor.AWQ!tr.bdr
F-Prot	4.3.2.48	2007.09.27	-
F-Secure	6.70.13030.0	2007.09.28	W32/Smalldoor.DLO
Ikarus	T3.1.1.12	2007.09.28	Packed.Win32.Klone.af
Kaspersky	7.0.0.125	2007.09.28	-
McAfee	5129	2007.09.27	BackDoor-AWQ.b
Microsoft	1.2803	2007.09.28	-
NOD32v2	2558	2007.09.28	probably a variant of Win32/Hupigon
Norman	5.80.02	2007.09.28	W32/Smalldoor.DLO
Panda	9.0.0.4	2007.09.28	Bck/Hupigon.AZG
Prevx1	V2	2007.09.28	-
Rising	19.42.42.00	2007.09.28	-
Sophos	4.21.0	2007.09.28	-
Sunbelt	2.2.907.0	2007.09.28	Backdoor.Graybird
Symantec	10	2007.09.28	Backdoor.Graybird
TheHacker	6.2.6.073	2007.09.28	W32/Behav-Heuristic-067
VBA32	3.12.2.4	2007.09.27	-
VirusBuster	4.3.26:9	2007.09.28	-
Webwasher-Gateway	6.0.1	2007.09.28	Win32.Malware.gen (suspicious)

xiaopangmd

Scanning Log
Version of virus signature database: 2558 (20070928)
Date: 29.9.2007  Time: 00:18:38
Scanned disks, folders and files: C:\Documents and Settings\Martin\桌面\OUGISHI4LB30.rar
C:\Documents and Settings\Martin\桌面\OUGISHI4LB30.rar » RAR » OUGISHI4LB30.EXE - probably a variant of Win32/Hupigon trojan
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 00:18:40  Total scanning time: 2 sec (00:00:02)

seraphmm

金山报了这个后我把它卸载换红伞了
现在是红伞＋微点

capsshift

真的过了红伞，没有微点，不能测试。

seraphmm

现在的问题是：到底是诺顿咖啡NOD32等误报还是

能过红伞蜘蛛卡巴＋微点？



这个软件我用了，也没感觉出什么问题，难道是汉化的时候加了后门

hhuqnr

咖啡8.5!也报了~

楼主，试试把卡巴的手动式扫描的启发式开到最强然后在试试看。

[ 本帖最后由 hhuqnr 于 2007-9-29 01:05 编辑 ]

浪滔天

.

loveows

样本有问题运行不了

lao055902

真的过卡巴了，我用卡巴扫过没报
我的是kis6.0

mofunzone

误报
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
556321         OUGISHI4LB30.EXE         93.66 KB         FALSE POSITIVE



Please find a detailed report concerning each individual sample below: Filename        Result
OUGISHI4LB30.EXE         FALSE POSITIVE


The file 'OUGISHI4LB30.EXE' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 6.38.1.211.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.
就结果来看，是你那个找不到的dll有问题，而这个程序没问题的