误报？

david-2008

File pep.com_1_.VIR received on 10.02.2008 09:07:17 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 3/36 (8.34%)

Loading server information...
Your file is queued in position: ___.
Estimated start time is between ___ and ___
.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.

Compact
Print results

Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position:
) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.  

Email:

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.10.2.0	2008.10.02	-
AntiVir	7.8.1.34	2008.10.01	HTML/Infected.WebPage.Gen
Authentium	5.1.0.4	2008.10.02	HTML/Iframe.A!Camelot
Avast	4.8.1248.0	2008.10.01	-
AVG	8.0.0.161	2008.10.01	-
BitDefender	7.2	2008.10.02	-
CAT-QuickHeal	9.50	2008.10.01	-
ClamAV	0.93.1	2008.10.02	-
DrWeb	4.44.0.09170	2008.10.02	-
eSafe	7.0.17.0	2008.10.01	-
eTrust-Vet	31.6.6121	2008.10.02	-
Ewido	4.0	2008.10.01	-
F-Prot	4.4.4.56	2008.09.30	-
F-Secure	8.0.14332.0	2008.10.02	-
Fortinet	3.113.0.0	2008.10.02	-
GData	19	2008.10.02	-
Ikarus	T3.1.1.34.0	2008.10.02	-
K7AntiVirus	7.10.479	2008.10.01	-
Kaspersky	7.0.0.125	2008.10.02	-
McAfee	5396	2008.10.02	-
Microsoft	1.4005	2008.10.02	-
NOD32	3488	2008.10.02	-
Norman	5.80.02	2008.10.01	-
Panda	9.0.0.4	2008.10.02	-
PCTools	4.4.2.0	2008.10.01	-
Prevx1	V2	2008.10.02	-
Rising	20.63.62.00	2008.09.28	-
SecureWeb-Gateway	6.7.6	2008.10.02	Heuristic.Script.Infected.WebPage
Sophos	4.34.0	2008.10.02	-
Sunbelt	3.1.1675.1	2008.09.27	-
Symantec	10	2008.10.02	-
TheHacker	6.3.0.9.098	2008.10.01	-
TrendMicro	8.700.0.1004	2008.10.02	-
VBA32	3.12.8.6	2008.10.02	-
ViRobot	2008.10.1.1402	2008.10.02	-
VirusBuster	4.5.11.0	2008.10.01	-

Additional information

File size: 2048 bytes

MD5...: 42a100a698eedd6ff35753a3286dfa76

SHA1..: 29eb6c3e2dc52e038a5fe7a042f8d6cbd278866b

SHA256: de0cea8a42e183c6407640d8e7b5455adf80831c6ce2562256db7f6b2de9a043

SHA512: c9c6cf1966cf28b8d53da9b0c184920bd298b1fe3ba47fc56c4ac7a91f406a0b 8b6ff6f3e1bef0aa71df3e651eccaf77854c76da23c56eb81ba4555a4a95f5ed

PEiD..: -

TrID..: File type identification HyperText Markup Language (100.0%)

PEInfo:

hzyw

应该是误报了。。

kk12

SEP 无反应

granthill

感觉是 误报

qigang

我这边肯定点，确定是误报，嘿嘿。

Kitman

File ID         Filename         Size (Byte)        Result
25149924         pep.com[1].rar        1.01 KB        OK
A listing of files contained inside archives alongside their results can be found below:

File ID         Filename         Size (Byte)        Result
25149925         pep.com[1].VIR         2 KB         UNDER ANALYSIS

Kitman

File ID  Filename Size (Byte) Result
25149924  pep.com[1].rar 1.01 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25149925  pep.com[1].VIR  2 KB  DAMAGED FILE (MALWARE)


Please find a detailed report concerning each individual sample below:

Filename Result
pep.com[1].VIR  DAMAGED FILE (MALWARE)

The file 'pep.com[1].VIR' has been determined to be 'DAMAGED FILE (MALWARE)'. In particular this means that this file is damaged and not working properly. Nevertheless we were able to determine that it contains malicious code fragments. Our analysts named the threat HTML/Infected.WebPage.Gen. The term "HTML/" denotes a script-virus that is able to infect the system using a HTML script.This malware is detected by a special detection routine from the engine module.