小红伞报的3个EXE

lomo

[0] Archive type: RAR
    --> rmedtgui\plugins\dtdrive_gui.exe
      [DETECTION] This file has been compressed using unusual runtime compression (PCK/Molebox). Please verify the origin of this file.
    --> rmedtgui\GUIMux.exe
      [DETECTION] Contains HEUR/Crypted suspicious code
    --> rmedtgui\RMAShell.exe
      [DETECTION] This file has been compressed using unusual runtime compression (PCK/Molebox). Please verify the origin of this file.

扫描结果 :   18%的杀软(7/38)报告发现病毒
http://virscan.org/report/1bdfe2fa42606458426fc3e385eca272.html

syfwxmh

原帖由 lomo 于 2008-10-11 14:47 发表
[0] Archive type: RAR
    --> rmedtgui\plugins\dtdrive_gui.exe
      [DETECTION] This file has been compressed using unusual runtime compression (PCK/Molebox). Please verify the origin of this file. ...

应该是误报

lomo

用SB试。。。
我现在在VM+SD下试用
霏凡&绿软下的视频分割绿色软件

电影结束了

blink ~0

sjducker

FS果然不只AVP那么强大，扫描发现0个
但是沙盘中运行被阻止

syfwxmh

Hello,

dtdrive_gui.exe_,
GUIMux.exe_,
RMAShell.exe_

No malicious code were found in these files.

Please quote all when answering.

love_rain99

咖啡没有报

lomo

We received the following archive files:

File ID  Filename Size (Byte) Result
25157528  test.zip 372.66 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25157529  dtdrive_gui.exe  291 KB  MALWARE
25157530  GUIMux.exe  48 KB  MALWARE
25157531  RMAShell.exe  116.5 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
dtdrive_gui.exe  MALWARE

The file 'dtdrive_gui.exe' has been determined to be 'MALWARE'. Our analysts named the threat PCK/Molebox. File has been compressed with an unusual runtime compression tool. Please make sure that this file comes from a trustworthy source.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: PCK/Molebox.

Filename Result
GUIMux.exe  MALWARE

The file 'GUIMux.exe' has been determined to be 'MALWARE'. Our analysts named the threat HEUR/Crypted. This malware is detected by a special detection routine from the engine module.

Filename Result
RMAShell.exe  MALWARE

The file 'RMAShell.exe' has been determined to be 'MALWARE'. Our analysts named the threat PCK/Molebox. File has been compressed with an unusual runtime compression tool. Please make sure that this file comes from a trustworthy source.This malware is detected by a special detection routine from the engine module.

sam.to

真怪.....
你上报有沒有註明是false postive?

lomo

没有
由于是破解绿化软件
不太确定是否干净的