一个木马

wodeshijie

免杀的木马

sam.to

Begin scan in 'C:\Documents and Settings\kato9096\桌面\1.rar'
C:\Documents and Settings\kato9096\桌面\1.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING]   The file was ignored!


to kl

挪威的冬天

无限壳?

金山毒霸 0

红心王子

1.rar               222.08/222.08KB     100.00%    在线扫描      它是一个“木马”    2008-5-22 12:11:43   2008-5-22 12:12:17

wodeshijie

在服务器上找到的
TNND,我要重装系统了

sqsszzq

EAV飘过

Palkia

kv 0

palfan

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.20.0	2008.05.21	-
AntiVir	7.8.0.19	2008.05.21	TR/Crypt.XPACK.Gen
Authentium	5.1.0.4	2008.05.21	-
Avast	4.8.1195.0	2008.05.21	-
AVG	7.5.0.516	2008.05.21	BackDoor.PcClient.2.S
BitDefender	7.2	2008.05.22	Backdoor.Generic.46559
CAT-QuickHeal	9.50	2008.05.21	-
ClamAV	0.92.1	2008.05.22	-
DrWeb	4.44.0.09170	2008.05.21	-
eSafe	7.0.15.0	2008.05.21	-
eTrust-Vet	31.4.5808	2008.05.21	-
Ewido	4.0	2008.05.21	-
F-Prot	4.4.2.54	2008.05.16	-
F-Secure	6.70.13260.0	2008.05.22	-
Fortinet	3.14.0.0	2008.05.22	W32/PCCLIEN.AFR!tr.bdr
GData	2.0.7306.1023	2008.05.22	-
Ikarus	T3.1.1.26.0	2008.05.22	Backdoor.Win32.PcClient.yw
Kaspersky	7.0.0.125	2008.05.22	-
McAfee	5300	2008.05.21	-
Microsoft	1.3520	2008.05.22	-
NOD32v2	3118	2008.05.21	-
Norman	5.80.02	2008.05.21	-
Panda	9.0.0.4	2008.05.22	Suspicious file
Prevx1	V2	2008.05.22	Malicious Software
Rising	20.45.30.00	2008.05.22	-
Sophos	4.29.0	2008.05.22	-
Sunbelt	3.0.1123.1	2008.05.17	-
Symantec	10	2008.05.22	-
TheHacker	6.2.92.315	2008.05.21	-
VBA32	3.12.6.6	2008.05.21	suspected of Malware.Agent.22 (paranoid heuristics)
VirusBuster	4.3.26:9	2008.05.21	-
Webwasher-Gateway	6.6.2	2008.05.21	Trojan.Crypt.XPACK.Gen

卡巴还没入库？

woai_jolin

时间        模件        事件        用户名称
2008-5-22 12:54:08        核心        文件 'G:\v\复件 1.exe' 已被传送到Eset作分析之用。

woai_jolin

Hello,

Thanks for taking the time to submit your samples to the Norman
Sandbox Information Center.  Customer delight is our top priority at
Norman.  With that in mind we have developed Sandbox Solutions for
organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to
analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test
environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

1.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS
    * Compressed: NO
    * TLS hooks: NO
    * Executable type: Application
    * Executable file structure: OK

[ General information ]
    * File length:       242938 bytes.
    * MD5 hash: cbf31ba720f7a7053e2231461f5b8168.

[ Process/window information ]
    * Creates a mutex Global\ps300053233.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

This file is not flagged as malicious by the Norman Sandbox Information Center. However, we can not guarantee that the file is harmless. If you still suspect the file to be malicious and if you urgently need to know for sure, please submit it to your local Norman support department for manual analysis.


************************************
Sent from an unmonitored email address.
Please DO NOT reply.
************************************