ACDSee 3.1 SR1 美化版有恶意行为吗？？？

显示全部楼层 · 发表于 2008-4-23 01:17:38

ACDSee 3.1 SR1 美化版 build 1030(蓝色网际)  http://nj.onlinedown.net/soft/23183.htm
VirSCAN.org Scanned Report :
Scanned time : 2008/04/23 01:07:36 (CST)
Scanner results: 22%的杀软(8/36)报告发现病毒
File Name    : acdc31sr1.exe
File Size    : 4611868 byte
File Type    : MS-DOS executable (EXE), OS/2 or MS Windows
MD5          : c632d1cda21943ebb0f33c2e19bb144c
SHA1          : 2ccfbc9e8cb18cc242f1c893c3daf99bb8f82c22
Online report  : http://virscan.org/report/8bd12450952248ecaba82b878d8ed768.html
Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.16       2008.04.22       2008-04-22  40.24  -
安博士V3    2008.04.19.00 2008.04.19       2008-04-19  40.53  -
AntiVir       7.8.0.8       7.0.3.198       2008-04-22  2.57 TR/Dldr.Agent.90112
Arcavir       1.0.4          200804221140    2008-04-22  6.26 -
AVAST       1.0.8          080422-0       2008-04-22  4.70 Win32:Agent-SEZ [Trj]
AVG          7.5.51.442    269.23.3/1391    2008-04-22  5.71 -
BitDefender 7.60825.1173631 7.18595          2008-04-23  9.80 -
CA (VET)    9.0.0.143    31.3.5725       2008-04-22  40.24  -
ClamAV       0.93          6863             2008-04-21  15.96  Trojan.Agent-18199
Comodo       2.11          2.0.0.503       2008-04-22  17.50  -
CP Secure    1.1.0.715    2008.04.23       2008-04-23  5.45 -
Dr.WEB       4.44.0.9170    2008.04.22       2008-04-22  14.01  -
ewido       4.0.0.2       2008.04.22       2008-04-22  25.47  -
F-PROT       4.4.1.52       20080421       2008-04-21  4.62 -
F-SECURE    5.51.6100    2008.04.22.06    2008-04-22  8.29 -
飞塔          2.81-3.11    9.0             2008-04-22  21.72  -
ViRobot       20080422       2008.04.22       2008-04-22  2.49 -
IKARUS       T3.1.01.26    2008.04.22.70641  2008-04-22  4.43 -
江民杀毒    10.00.650    2008.04.22       2008-04-22  6.66 -
卡巴斯基    5.5.10       2008.04.22       2008-04-22  24.70  -
金山毒霸    2007.6.20.249 2008.4.22       2008-04-22  10.25  -
迈克菲       5.2.00       5279             2008-04-22  5.41 -
Microsoft    1.3408       2008.04.22       2008-04-22  17.36  -
MKS_VIR       2.01          2008.04.22       2008-04-22  3.13 -
NORMAN       5.91.10       5.90             2008-04-22  7.78 -
熊猫卫士    9.04.03.0001 2008.04.22       2008-04-22  5.61 -
趋势          8.500-1001    5.232.08       2008-04-22  0.24 TROJ_AGENT.NKO
Prevx       V2             20080422       2008-04-22  5.98 WORM.VIKING.NCO
QuickHeal    9.00          2008.04.22       2008-04-22  4.31 -
瑞星          20.0          20.41.12.00    2008-04-22  2.71 Trojan.Win32.Undef.bmy
SOPHOS       2.72.0       4.28             2008-04-23  12.40  Mal/Generic-A
赛门铁克    1.3.0.24       20080422.003    2008-04-22  0.45 -
nProtect    2008-04-22.01 1418759          2008-04-22  16.63  -
The Hacker    6.2.92       v00286          2008-04-21  1.33 -
VBA32       3.12.6.4       20080422.0612    2008-04-22  3.50 Embedded.Trojan.Win32.Agent.eoq (suspicious)
VirusBuster 4.3.19:9       9.126.1/11.0    2008-04-22  18.38  -

显示全部楼层 · 发表于 2008-4-23 05:06:14

问题大了，被捆了东西，扔在这里

File:	csrss.rar
Status:	INFECTED/MALWARE
MD5:	a3252dccc20c0e41cd1778f06b216e0e
Packers detected:	-
Bit9 reports:	File not found

Scanner results
Scan taken on 22 Apr 2008 21:05:14 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Dldr.Agent.90112
ArcaVir	Found nothing
Avast	Found Win32:Agent-SEZ
AVG Antivirus	Found Agent.OLQ
BitDefender	Found nothing
ClamAV	Found Trojan.Agent-18199
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan.Win32.Agent.eoq
Fortinet	Found W32/Agent.EOQ!tr
Ikarus	Found Trojan.Win32.Agent.eoq
Kaspersky Anti-Virus	Found Trojan.Win32.Agent.eoq
NOD32	Found probably a variant of Win32/Agent (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Generic-A
VirusBuster	Found nothing
VBA32	Found Trojan.Win32.Agent.eoq

显示全部楼层 · 发表于 2008-4-23 10:08:11

Begin scan in 'C:\Documents and Settings\haha\桌面\csrss.rar'
C:\Documents and Settings\haha\桌面\csrss.rar
  [0] Archive type: RAR
  --> csrss.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.90112
   [NOTE]    A backup was created as '48809a6b.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-4-23 12:12:26

[Found Trojan] <W32/Trojan2.ZED (exact, not disinfectable)> C:\test\csrss.rar->csrss.exe

显示全部楼层 · 发表于 2008-4-23 14:33:14

已删除：木马程序 Trojan.Win32.Agent.eoq 文件: D:\临时文件\csrss.rar/csrss.exe

显示全部楼层 · 发表于 2008-4-23 14:37:57

红心王子经验 +2 感谢MM提供样本

omg...

显示全部楼层 · 发表于 2008-4-23 20:16:48

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.bmy

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.41.21

显示全部楼层 · 发表于 2008-4-23 20:21:32

McAfee MISS

显示全部楼层 · 发表于 2008-4-23 20:34:35

上报一下，看看是不是誤报

显示全部楼层 · 发表于 2008-4-23 22:52:07

卡巴不認為是誤报

[其他相关] ACDSee 3.1 SR1 美化版有恶意行为吗？？？

本帖子中包含更多资源

评分

回复 2楼 mofunzone 的帖子

回复 9楼 kato9096 的帖子

[其他相关] ACDSee 3.1 SR1 美化版 有恶意行为吗？？？

本帖子中包含更多资源

评分

回复 2楼 mofunzone 的帖子

回复 9楼 kato9096 的帖子

[其他相关] ACDSee 3.1 SR1 美化版有恶意行为吗？？？