过卡巴，红伞抓！

woai_jolin

Hello,

Thanks for taking the time to submit your samples to the Norman
Sandbox Information Center.  Customer delight is our top priority at
Norman.  With that in mind we have developed Sandbox Solutions for
organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to
analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test
environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

Server_BK.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS
    * Compressed: NO
    * TLS hooks: YES
    * Executable type: Application
    * Executable file structure: OK

[ General information ]
    * Accesses executable file from resource section.
    * File length:       140800 bytes.
    * MD5 hash: bbe2d26bd54cc561ac100e02c8b87292.

[ Changes to filesystem ]
    * Creates file C:\WINDOWS\abs.sO.

[ Signature Scanning ]
    * C:\WINDOWS\abs.sO (130192 bytes) : no signature detection.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

This file is not flagged as malicious by the Norman Sandbox Information Center. However, we can not guarantee that the file is harmless. If you still suspect the file to be malicious and if you urgently need to know for sure, please submit it to your local Norman support department for manual analysis.


************************************
Sent from an unmonitored email address.
Please DO NOT reply.
************************************

wangjay1980

TO  KL

wd19910904

顶下啊  ......

wangjay1980

Server_BK.exe_ - Trojan-Downloader.Win32.Delf.ess

wei023cn

卡巴病毒扫描过了。但别忘了他还有主动防御

allinwonderi

ArcaMicroScan not found!

qigang

rising20.31.50未杀！

zhuhaoheben

BitDefender过

挪威的冬天

信息        2008-02-17  20:02:24        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-02-17  20:02:24        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个                       
信息        2008-02-17  20:02:24        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-17  20:02:24        C:\Users\挪威的冬天\Desktop\Server_BK.rar\Server_BK.exe        Win32.TrojDownloader.Delf.140800        跳过，未处理

lwjcxy

铁克SEP11/1375没反应