高手帮忙判断下是误报还是真病毒？

psxkwind

冒险岛某外挂中的一个DLL文件 红伞报 但是不能确定是误报还是真的病毒
请高手帮忙分析下

The file 'MMxdSg.dll' has been determined to be 'UNDER ANALYSIS'.

启发, 上报Avira

sam.to

to kl,相信三天后有回复

wangjay1980

那用三天

Hello,

MMxdSg.dll - Trojan-PSW.Win32.Delf.bng

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

qigang

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.22.1	2008.05.26	-
AntiVir	7.8.0.19	2008.05.26	HEUR/Crypted
Authentium	5.1.0.4	2008.05.26	-
Avast	4.8.1195.0	2008.05.26	-
AVG	7.5.0.516	2008.05.25	-
BitDefender	7.2	2008.05.26	-
CAT-QuickHeal	9.50	2008.05.24	-
ClamAV	0.92.1	2008.05.26	-
DrWeb	4.44.0.09170	2008.05.26	-
eSafe	7.0.15.0	2008.05.25	-
eTrust-Vet	31.4.5823	2008.05.26	-
Ewido	4.0	2008.05.26	-
F-Prot	4.4.4.56	2008.05.26	-
F-Secure	6.70.13260.0	2008.05.26	-
Fortinet	3.14.0.0	2008.05.26	-
GData	2.0.7306.1023	2008.05.23	-
Ikarus	T3.1.1.26.0	2008.05.26	Backdoor.Win32.GF.13x.A
Kaspersky	7.0.0.125	2008.05.26	Trojan-PSW.Win32.Delf.bng
McAfee	5302	2008.05.23	-
Microsoft	1.3520	2008.05.26	-
NOD32v2	3131	2008.05.26	-
Norman	5.80.02	2008.05.23	-
Panda	9.0.0.4	2008.05.25	Suspicious file
Prevx1	V2	2008.05.26	-
Rising	20.46.00.00	2008.05.26	-
Sophos	4.29.0	2008.05.26	-
Sunbelt	3.0.1123.1	2008.05.17	-
Symantec	10	2008.05.26	-
TheHacker	6.2.92.318	2008.05.23	-
VBA32	3.12.6.6	2008.05.25	-
VirusBuster	4.3.26:9	2008.05.25	-
Webwasher-Gateway	6.6.2	2008.05.26	Heuristic.Crypted

附加信息

File size: 385878 bytes

MD5...: 1cf2f3a67535ae0a442231afad1d7489

SHA1..: 495efa29bb96db37062076bd8863a488659a185e

SHA256: fcebb1324e851fa5f3303f11993ff5e20daf39dfa3fcfda84d342a055a392b46

SHA512: 33338a124cc85ea957ee1848bc7641e508bdd761332ffafb8fc7ea78067c5d52 5b99543d45e1161e3eba1af6ebcd940668299d001c7cacae0bf14a8a65fb2e5a

PEiD..: -

PEInfo: -

挪威的冬天

金山毒霸 0

尤金卡巴斯基

已删除：木马程序 Trojan-PSW.Win32.Delf.bng        文件　: G:\Temp\MMxdSg.rar/MMxdSg.dll

sam.to

我三天前的上报到今天都不回

BING126

McAfee  MISS

timhas266

看名字红伞报壳了,有没有高手知道这是用了什么加壳软件