PWS-MARAN， 卡巴高启发飘

绅博周幸

沙盘报告：http://research.sunbelt-software.com/ViewMalware.aspx?id=3214521

llgiggs

Begin scan in 'C:\Documents and Settings\Administrator\桌面\down.rar'
C:\Documents and Settings\Administrator\桌面\down.rar
  [0] Archive type: RAR
  --> down.exe
      [DETECTION] Contains suspicious code HEUR/Crypted

曲中求

C:\Documents and Settings\Administrator\桌面\down.rar » RAR » down.exe - probably a variant of Win32/PSW.Maran trojan

绅博周幸

发现卡巴的启发引擎对ＺＬＯＢ和ＭＡＲＡＮ家族的变种查杀能力不强

绅博周幸

A-Squared  Found Trojan-PSW.Win32.Maran.uo  
AntiVir  Found HEUR/Crypted  
ArcaVir  Found Trojan.Psw.Maran.Uo  
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found Trojan.Spy-24311  
CPsecure  Found nothing
Dr.Web  Found Trojan.PWS.Maran.260  
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Ikarus  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably a variant of Win32/PSW.Maran (probable variant)  
Norman Virus Control  Found W32/Suspicious_N.gen  
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found Trojan-PSW.Win32.Maran.le

woai_jolin

norman的gen 够奇怪了

spaceplane

有沙盘报告真好

BD飘

ykz1991

[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        D:\sample\down_2.exe->(Klone.AF)->(NSPack)
[Quarantined]        D:\sample\down_2.exe->(Klone.AF)->(NSPack)

Joker

我早上7点的病毒库就报了。。

绅博周幸

原帖由 dark1109 于 2008-2-24 13:19 发表
我早上7点的病毒库就报了。。

卡７开高启发病毒库最新还是不报，看来卡８的引擎比较厉害哦