大家看看是毒吗？

htm123

大家看看是毒吗？

saga3721

不是吧...

htm123

virustotal那边好多报啊

wangfeng66

文件 ArpPatch.rar 接收于 2008.12.03 04:45:41 (CET)
当前状态: 完成

结果: 16/37 (43.24%)
格式化文本 打印结果  
反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.12.2.2 2008.12.02 -
AntiVir 7.9.0.36 2008.12.02 -
Authentium 5.1.0.4 2008.12.02 W32/Heuristic-210!Eldorado
Avast 4.8.1281.0 2008.12.02 Win32:Bifrose-CIQ
AVG 8.0.0.199 2008.12.03 Win32/Heur
BitDefender 7.2 2008.12.03 -
CAT-QuickHeal 10.00 2008.12.03 -
ClamAV 0.94.1 2008.12.02 Worm.Mytob.IS
DrWeb 4.44.0.09170 2008.12.03 -
eSafe 7.0.17.0 2008.12.02 Suspicious File
eTrust-Vet 31.6.6240 2008.12.03 -
Ewido 4.0 2008.12.02 -
F-Prot 4.4.4.56 2008.12.02 W32/Heuristic-210!Eldorado
F-Secure 8.0.14332.0 2008.12.03 W32/Agent
Fortinet 3.117.0.0 2008.12.03 -
GData 19 2008.12.03 Win32:Bifrose-CIQ  
Ikarus T3.1.1.45.0 2008.12.03 -
K7AntiVirus 7.10.540 2008.12.02 -
Kaspersky 7.0.0.125 2008.12.03 -
McAfee 5452 2008.12.02 Generic.cc
McAfee+Artemis 5452 2008.12.02 Generic.cc
Microsoft 1.4205 2008.12.03 -
NOD32 3659 2008.12.02 -
Norman 5.80.02 2008.12.02 W32/Agent
Panda 9.0.0.4 2008.12.02 Suspicious file
PCTools 4.4.2.0 2008.12.02 Packed/NSPack
Prevx1 V2 2008.12.03 -
Rising 21.06.12.00 2008.12.02 -
SecureWeb-Gateway 6.7.6 2008.12.03 -
Sophos 4.36.0 2008.12.03 Mal/EncPk-C
Sunbelt 3.1.1832.2 2008.12.01 -
Symantec 10 2008.12.03 -
TheHacker 6.3.1.2.172 2008.12.02 -
TrendMicro 8.700.0.1004 2008.12.02 PAK_Generic.001
VBA32 3.12.8.10 2008.12.02 -
ViRobot 2008.12.2.1496 2008.12.02 -
VirusBuster 4.5.11.0 2008.12.02 Packed/NSPack
附加信息
File size: 69755 bytes
MD5...: 2b5aeab4682573eb5a87a3a4e764f219
SHA1..: bd36e99715b94856e2a2f2c770e9cae4af23cd21
SHA256: d822004b346e69d3ac279784ae810c3892660e062ef60b8748583e799d2bd8b9
SHA512: 23a51ca0b38b08a4df2d4827d54851843f61e1d88cfbb747ee9fe9f278616871
bbac04b4b9c29284f0c912898eb43411f4f2c2eb003e4ae0cd9dc9a8a19c43ce

ssdeep: 1536:Da2jLc4lRvApJ1L44nBAYTlRR9zh9AWgIDipvAyLaU0Z2mHb:Rc4lRGt44n
vJRNt9DipIAQ2m7

PEiD..: -
TrID..: File type identification
RAR Archive (83.3%)
REALbasic Project (16.6%)
PEInfo: -
packers (Kaspersky): NSPack
packers (F-Prot): NSPack
packers (Authentium): NSPack

change_018

名字是...Arp补丁...？

BING126

误报。。

saga3721

File ID 燜ilename Size (Byte) Result
25202276  Qufuyida.exe  80.5 KB  CLEAN
25202277  YiDaArp.inf  93 Byte  CLEAN


Please find a detailed report concerning each individual sample below:

燜ilename Result
Qufuyida.exe  CLEAN

The file 'Qufuyida.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.