symantec 、卡巴， 昨天查到，今天查不到

freebe

同一文件


文件 InstallAVg_880385.zip 接收于 2009.01.17 09:26:31 (CET)反病毒引擎 版本 最后更新 扫描结果
a-squared 4.0.0.73 2009.01.17 Trojan.Win32.FakeXPA!IK
AhnLab-V3 2009.1.15.0 2009.01.16 -
AntiVir 7.9.0.55 2009.01.16 TR/Fake.Antivirus.2009.DM
Authentium 5.1.0.4 2009.01.16 -
Avast 4.8.1281.0 2009.01.16 Win32:Ups
AVG 8.0.0.229 2009.01.16 Fake_AntiSpyware.AXS
BitDefender 7.2 2009.01.17 Trojan.Generic.1265702
CAT-QuickHeal 10.00 2009.01.17 FraudTool.Antivirus2009.dm (Not a Virus)
ClamAV 0.94.1 2009.01.17 -
Comodo 933 2009.01.16 -
DrWeb 4.44.0.09170 2009.01.17 -
eSafe 7.0.17.0 2009.01.15 -
eTrust-Vet 31.6.6312 2009.01.17 -
F-Prot 4.4.4.56 2009.01.16 -
F-Secure 8.0.14470.0 2009.01.17 Rogue:W32/Antivirus2009.AR
Fortinet 3.117.0.0 2009.01.15 Misc/Antivirus2009
GData 19 2009.01.17 Trojan.Generic.1265702
Ikarus T3.1.1.45.0 2009.01.17 Trojan.Win32.FakeXPA
K7AntiVirus 7.10.593 2009.01.16 not-a-virus:FraudTool.Win32.Antivirus2009.dm
Kaspersky 7.0.0.125 2009.01.17 not-a-virus:FraudTool.Win32.Antivirus2009.dm
McAfee 5497 2009.01.16 Generic Dropper.bw
McAfee+Artemis 5497 2009.01.16 Generic Dropper.bw
Microsoft 1.4205 2009.01.17 Trojan:Win32/FakeXPA
NOD32 3772 2009.01.16 a variant of Win32/Kryptik.EJ
Norman 5.93.01 2009.01.16 W32/Antivirus2008.BOS
nProtect 2009.1.8.0 2009.01.16 Trojan.Generic.1265702
Panda 9.5.1.2 2009.01.16 Adware/Antivirus2009
PCTools 4.4.2.0 2009.01.16 -
Prevx1 V2 2009.01.17 Fraudulent Security Program
Rising 21.12.51.00 2009.01.17 -
SecureWeb-Gateway 6.7.6 2009.01.16 Trojan.Fake.Antivirus.2009.DM
Sophos 4.37.0 2009.01.17 Mal/FakeAV-I
Sunbelt 3.2.1835.2 2009.01.16 -
Symantec 10 2009.01.17 Packed.Generic.187
TheHacker 6.3.1.4.220 2009.01.14 -
TrendMicro 8.700.0.1004 2009.01.16 Cryp_FakeAV-9
VBA32 3.12.8.10 2009.01.16 -
ViRobot 2009.1.16.1562 2009.01.16 Adware.Antivirus2009.R.122880
VirusBuster 4.5.11.0 2009.01.16 -

附加信息
File size: 67888 bytes
MD5...: 8f02d8e056fe3e3767198b6353f9ad51
SHA1..: 2369d9cc26998b88b387253a5bf8f95778efe012
SHA256: a24f813af9afa057d8f0c305d636c1595e942a38fd99694867a556c868b6ec33
SHA512: f91cfbdb9929636090a3845e9e9a68ed67356841906b36700ad6fedba0b7f54a<BR>8f3629615ecdcf5fa3293c3eb9c8036ad01e71482b64728c3ed524538108be68<BR>
ssdeep: 1536:ZNhF9nwzrxLDDwoY+OaFl9b03k7ua54ZG4X3cftE:ZN7oxbLd0U7ugH4Xat<BR>E<BR>
PEiD..: -
TrID..: File type identification<BR>ZIP compressed archive (100.0%)
PEInfo: -
Prevx info: <A href="http://info.prevx.com/aboutprogramtext.asp?PX5=0DB2292F0036D329E00A012DDDE82A00A2D7A80E" target=_blank>http://info.prevx.com/aboutprogr ... DDE82A00A2D7A80E<;/A>

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－

文件 InstallAVg_880385.zip 接收于 2009.01.18 05:00:36 (CET)反病毒引擎 版本 最后更新 扫描结果
a-squared 4.0.0.73 2009.01.18 Trojan.Win32.FakeXPA!IK
AhnLab-V3 2009.1.15.0 2009.01.17 -
AntiVir 7.9.0.57 2009.01.17 TR/Fake.Antivirus.2009.DM
Authentium 5.1.0.4 2009.01.17 -
Avast 4.8.1281.0 2009.01.16 Win32:Ups
AVG 8.0.0.229 2009.01.17 -
BitDefender 7.2 2009.01.18 -
CAT-QuickHeal 10.00 2009.01.17 FraudTool.Antivirus2009.dm (Not a Virus)
ClamAV 0.94.1 2009.01.17 -
Comodo 934 2009.01.17 -
DrWeb 4.44.0.09170 2009.01.18 -
eSafe 7.0.17.0 2009.01.15 -
eTrust-Vet 31.6.6312 2009.01.17 -
F-Prot 4.4.4.56 2009.01.17 -
F-Secure 8.0.14470.0 2009.01.18 Rogue:W32/Antivirus2009.AR
Fortinet 3.117.0.0 2009.01.15 Misc/Antivirus2009
GData 19 2009.01.18 Trojan.Generic.1265702
Ikarus T3.1.1.45.0 2009.01.18 Trojan.Win32.FakeXPA
K7AntiVirus 7.10.594 2009.01.17 not-a-virus:FraudTool.Win32.Antivirus2009.dm
Kaspersky 7.0.0.125 2009.01.18 -
McAfee 5498 2009.01.17 Generic Dropper.bw
McAfee+Artemis 5498 2009.01.17 Generic Dropper.bw
Microsoft None 2009.01.17 -
NOD32 3774 2009.01.17 a variant of Win32/Kryptik.EJ
Norman 5.93.01 2009.01.16 W32/Antivirus2008.BOS
nProtect 2009.1.8.0 2009.01.16 Trojan.Generic.1265702
Panda 9.5.1.2 2009.01.17 Adware/Antivirus2009
PCTools 4.4.2.0 2009.01.17 -
Prevx1 V2 2009.01.18 Fraudulent Security Program
Rising 21.12.60.00 2009.01.18 -
SecureWeb-Gateway 6.7.6 2009.01.17 Trojan.Fake.Antivirus.2009.DM
Sophos 4.37.0 2009.01.17 Mal/FakeAV-I
Sunbelt 3.2.1835.2 2009.01.16 -
Symantec 10 2009.01.18 -
TheHacker 6.3.1.5.222 2009.01.17 -
TrendMicro 8.700.0.1004 2009.01.16 Cryp_FakeAV-9
VBA32 3.12.8.10 2009.01.17 -
ViRobot 2009.1.17.1563 2009.01.17 Adware.Antivirus2009.R.122880
VirusBuster 4.5.11.0 2009.01.17 -

附加信息
File size: 67888 bytes
MD5...: 8f02d8e056fe3e3767198b6353f9ad51
SHA1..: 2369d9cc26998b88b387253a5bf8f95778efe012
SHA256: a24f813af9afa057d8f0c305d636c1595e942a38fd99694867a556c868b6ec33
SHA512: f91cfbdb9929636090a3845e9e9a68ed67356841906b36700ad6fedba0b7f54a<BR>8f3629615ecdcf5fa3293c3eb9c8036ad01e71482b64728c3ed524538108be68<BR>
ssdeep: 1536:ZNhF9nwzrxLDDwoY+OaFl9b03k7ua54ZG4X3cftE:ZN7oxbLd0U7ugH4Xat<BR>E<BR>
PEiD..: -
TrID..: File type identification<BR>ZIP compressed archive (100.0%)
PEInfo: -
Prevx info: <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=0DB2292F0036D329E00A012DDDE82A00A2D7A80E' target='_blank'>http://info.prevx.com/aboutprogr ... DE82A00A2D7A80E&;lt;/a>

[ 本帖最后由 freebe 于 2009-1-18 12:18 编辑 ]

cnreadcom

什么东西。

chenyilong58

误报吧

freebe

F-Secure 8.0.14470.0 报的 “Rogue:W32/Antivirus2009.AR” 是小弟弟当天误中了报到F-Secure 后第二天加进去的。
F-Secure 8.0或2009版本会先用自家的Hydra引擎，然后再用Kaspersky的AVP引擎，报出的名会不同，因为Hydra引擎已经有了，所以不会再用Kaspersky的AVP引擎扫描而出Hydra引擎的“Rogue:W32/Antivirus2009.AR”。

[ 本帖最后由 freebe 于 2009-1-18 14:51 编辑 ]