ctfmona.exe [md5:7a76d6]

显示全部楼层 · 发表于 2008-5-11 02:58:11

谁能解释一下为什么nod32号称网络启发的static或跑到这里来？
难道jotti可以测试nod32的网络启发？
还是static被加到扫描了？

File:	ctfmona.exe
Status:	INFECTED/MALWARE
MD5:	7a76d6c597c699706565ee280c9de3a2
Packers detected:	-
Bit9 reports:

Scanner results
Scan taken on 10 May 2008 18:55:55 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Agent.lsr
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found Pakes.ZN
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan.Win32.Agent.lsr
Fortinet	Found W32/Agent.AOEZ!tr
Ikarus	Found nothing
Kaspersky Anti-Virus	Found Trojan.Win32.Agent.lsr
NOD32	Found probably a variant of Win32/Statik application (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/HckPk-A
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-11 08:48:06

C:\Documents and Settings\Administrator\桌面\ctfmona.rar>>ctfmona.exe Trojan.Agent.lsr.jalg 木马还未处理

显示全部楼层 · 发表于 2008-5-11 09:22:00

kv 0

显示全部楼层 · 发表于 2008-5-11 10:25:44

据说statik只是无完整加入以前成堆的zhelatin statik也能扫描出几个...

显示全部楼层 · 发表于 2008-5-11 10:29:05

金山 0

显示全部楼层 · 发表于 2008-5-11 14:12:03

nod32已经被病毒免杀到无奈了，所以没胆子加到扫描我估计

显示全部楼层 · 发表于 2008-5-11 20:29:36

RS20.43.62未杀！

[病毒样本] ctfmona.exe [md5:7a76d6]