AutoCAD2007简体中文版中隐藏的病毒

显示全部楼层 · 发表于 2008-11-14 00:51:08

AutoCAD2007简体中文版\Bin\acadFeui\Program Files\Root\Support目录下的，不知道vel.arx这个文件删除了，CAD还能正常安装吗？

VirSCAN.org Scanned Report :
Scanned time : 2008/11/14 00:42:18 (CST)
Scanner results: 13%的杀软(5/39)报告发现病毒
File Name    : vel.arx
File Size    : 57344 byte
File Type    : PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bi
MD5          : 502a3a9025f4e725fcdca2eeb56ecdb5
SHA1          : e8c90c1efb60c18a6822529efdcbf600ad772803
Online report  : http://virscan.org/report/4241ac38808ceb8bbee2221583e028af.html
Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    4.0.0.26       20081113083701 2008-11-13  3.17 -
安博士V3    2008.11.13.02 2008.11.13       2008-11-13  1.00 -
AntiVir       7.9.0.31       7.1.0.81       2008-11-13  1.52 -
安天          2.0.18       20081112.1570491  2008-11-12  0.12 -
Arcavir       1.0.5          200811061144    2008-11-06  1.22 -
Authentium    5.1.1          200811130829    2008-11-13  1.07 -
AVAST!       3.0.1          081113-0       2008-11-13  0.01 Win32:Trojan-gen {Other}
AVG          7.5.52.442    270.9.2/1785    2008-11-13  1.72 Agent.AIZF
BitDefender 7.81008.2161639 7.21847          2008-11-13  2.01 -
CA (VET)    9.0.0.143    31.6.6208       2008-11-13  3.80 -
ClamAV       0.94.1       8627             2008-11-13  0.02 -
Comodo       2.11          2.0.0.704       2008-11-11  0.65 -
CP Secure    1.1.0.715    2008.11.13       2008-11-13  6.39 -
Dr.Web       4.44.0.9170    2008.11.13       2008-11-13  3.48 -
ewido       4.0.0.2       2008.11.13       2008-11-13  3.01 -
F-Prot       4.4.4.56       20081112       2008-11-12  1.05 -
F-Secure    5.51.6100    2008.11.13.10    2008-11-13  0.04 -
飞塔          2.81-3.117    9.707          2008-11-13  0.56 -
GData       19.1520/19.103  20081113       2008-11-13  3.09 Win32:Trojan-gen {Other} [Engine:B]
ViRobot       20081113       2008.11.13       2008-11-13  0.83 -
Ikarus       T3.1.01.45    2008.11.13.71849  2008-11-13  3.88 -
江民杀毒    11.0.706       2008.11.13       2008-11-13  1.36 -
卡巴斯基    5.5.10       2008.11.13       2008-11-13  0.04 -
金山毒霸    2008.9.8.18    2008.11.13.17    2008-11-13  0.69 -
迈克菲       5.3.00       5432             2008-11-12  2.49 -
Microsoft    1.4104       2008.11.13       2008-11-13  5.37 -
mks_vir       2.01          2008.11.12       2008-11-12  2.77 -
Norman       5.93.01       5.93.00          2008-11-13  5.02 -
熊猫卫士    9.05.01       2008.11.12       2008-11-12  3.89 -
趋势科技    8.700-1004    5.652.04       2008-11-13  0.03 -
Quick Heal    9.50          2008.11.12       2008-11-12  1.90 -
瑞星          20.0          21.03.31.00    2008-11-13  0.97 -
Sophos       2.80.0       4.35             2008-11-13  1.95 Mal/Heuri-E
Sunbelt       3.1.1785.2    4374             2008-11-04  0.14 -
赛门铁克    1.3.0.24       20081112.003    2008-11-12  0.05 -
nProtect    2008-11-12.00 2539720          2008-11-12  3.23 -
The Hacker    6.3.1.1       v00151          2008-11-12  0.48 -
VBA32       3.12.8.9       20081112.1527    2008-11-12  1.31 Win32.Agent.OHS
VirusBuster 4.5.11.10    10.93.1/671578 2008-11-13  0.90 -

显示全部楼层 · 发表于 2008-11-14 01:06:52

瑞星 20.0 21.03.31.00 2008-11-13 0.97 -

失望

显示全部楼层 · 发表于 2008-11-14 01:57:09

报的很少，是病毒吗？我的卡巴没报。

显示全部楼层 · 发表于 2008-11-14 08:02:16

File ID    Filename Size (Byte) Result
25188230    vel.rar 18.2 KB OK

A listing of files contained inside archives alongside their results can be found below:File ID    Filename Size (Byte) Result
25159392    vel.arx    56 KB    CLEAN

Please find a detailed report concerning each individual sample below: Filename Result
vel.arx    CLEAN

显示全部楼层 · 发表于 2008-11-14 10:25:24

费尔不报

显示全部楼层 · 发表于 2008-11-14 10:28:09

误报，以前用精简版时遇到过，鉴定完毕。

显示全部楼层 · 发表于 2008-11-14 10:30:23

nod32

G:\vel.rar > RAR > vel.arx - Win32/Agent.OHS 特洛伊木马

显示全部楼层 · 发表于 2008-11-14 17:53:41

Hello,

vel.arx

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-11-14 18:26:56

应该是误报

显示全部楼层 · 发表于 2008-11-16 20:15:26

nod32

G:\vel.rar > RAR > vel.arx - Win32/Agent.OHS 特洛伊木马

[病毒样本] AutoCAD2007简体中文版中隐藏的病毒

本帖子中包含更多资源