可疑文件一个

显示全部楼层 · 发表于 2007-10-12 13:11:27

可疑文件一个。是木马吗？？？请高手分析一下。

显示全部楼层 · 发表于 2007-10-12 13:13:51

运行后无反应？建议还是不要用了
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\文件捆绑检测器.rar'
C:\Users\morgan\Documents\
  文件捆绑检测器.rar
  文件捆绑检测器.rar:Zone.Identifier
[0] Archive type: RAR
--> ÎÄ¼þÀ¦°ó¼ì²âÆ÷.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-12 13:15:58

File:	文件捆绑检测器.exe
Status:	INFECTED/MALWARE
MD5:	8ee267bf24f2acec30169ff101584eac
Packers detected:	PECRC, NSPACK
Bit9 reports:	File not found

Scanner results
Scan taken on 12 Oct 2007 05:14:42 (GMT)
A-Squared	Found nothing
AntiVir	Found HEUR/Crypted
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Packer
VirusBuster	Found nothing
VBA32	Found Embedded.Backdoor.Win32.Delf.ase (probable variant)

显示全部楼层 · 发表于 2007-10-12 13:19:36

偶用卡巴查过后，运行了一下，没反应，估计中招了，所以发上来让高手看看。

现在还不知道会有啥问题？

显示全部楼层 · 发表于 2007-10-12 13:21:04

我这运行后都没动静。。
应该死掉了或者缺什么东西我觉得

显示全部楼层 · 发表于 2007-10-12 13:26:51

运行下没看出什么~管他呢~出问题再说

VBA32不错~

显示全部楼层 · 发表于 2007-10-12 14:00:11

没动作进程都没加载

显示全部楼层 · 发表于 2007-10-12 16:58:20

C:\ABC\文件捆绑检测器.rar:\文件捆绑检测器.exe - 特征码 'Packed.Win32.Klone.af' 被发现

显示全部楼层 · 发表于 2007-10-12 16:59:50

这东西加壳加死了

显示全部楼层 · 发表于 2007-10-12 17:52:32

Hello,

#######.exe_

No malicious code was found in this file

[可疑文件] 可疑文件一个

本帖子中包含更多资源

回复 2楼 mofunzone 的帖子

回复 4楼 DJ 的帖子