NATIVE.EXE卡巴、NOD32、大蜘蛛报毒

llydmissile

To McAfee Avert labs

tracydk

llydmissile

AVERT Labs - Beaverton
Current Scan Engine Version:5300.2777
Current DAT Version:5522.0000
Thank you for your submission.

Analysis ID: 5128838
Name        Findings        Detection        Type        Extra
native.exe        new detection        generic.dx        Trojan        yes

Attached is a file for extra detection, which will be included in a future DAT set. We have detected a virus or trojan that can only be detected and removed with the attached EXTRA.DAT and current scan engine. The EXTRA.DAT must be used with the current scan engine, and we highly recommend you update to the most current DAT release. If you are not seeing this with the product you are using, please speak with technical support so they can help you determine the cause of this discrepancy.

new detection [ native.exe ]
The file received contains a new virus or trojan. It is recommended that you update your DAT and engine files and scan your computer again.


Extra.dat 地址
https://www.webimmune.net/GetExtra.asp?AnalysisID=5128838

wai0903

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 43&t=1234351299
Information:  Is the TR/Rootkit.Gen Trojan  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.76, VDF 7.1.2.2

jackzkm

这个很难说的

尤金卡巴斯基

a-squared	4.0.0.93	2009.02.11	Trojan-Dropper.Agent!IK
AhnLab-V3	5.0.0.2	2009.02.11	Win-Trojan/Agent.13312.IQ
AntiVir	7.9.0.76	2009.02.11	TR/Rootkit.Gen
Authentium	5.1.0.4	2009.02.11	-
Avast	4.8.1335.0	2009.02.10	-
AVG	8.0.0.229	2009.02.11	Generic3.ADTY
BitDefender	7.2	2009.02.11	-
CAT-QuickHeal	10.00	2009.02.11	-
ClamAV	0.94.1	2009.02.11	-
Comodo	974	2009.02.11	TrojWare.Win32.TrojanDownloader.Agent.~ARB
DrWeb	4.44.0.09170	2009.02.11	Trojan.KillFiles.889
eSafe	7.0.17.0	2009.02.09	-
eTrust-Vet	31.6.6350	2009.02.11	-
F-Prot	4.4.4.56	2009.02.10	-
F-Secure	8.0.14470.0	2009.02.11	-
Fortinet	3.117.0.0	2009.02.11	-
GData	19	2009.02.11	-
Ikarus	T3.1.1.45.0	2009.02.11	Trojan-Dropper.Agent
K7AntiVirus	7.10.626	2009.02.10	Trojan.Win32.Malware.2
Kaspersky	7.0.0.125	2009.02.11	-
McAfee	5522	2009.02.10	-
McAfee+Artemis	5522	2009.02.10	-
Microsoft	1.4306	2009.02.11	-
NOD32	3845	2009.02.11	probably a variant of Win32/TrojanDownloader.Agent
Norman	6.00.02	2009.02.11	-
nProtect	2009.1.8.0	2009.02.11	-
Panda	10.0.0.10	2009.02.11	Suspicious file
PCTools	4.4.2.0	2009.02.10	-
Prevx1	V2	2009.02.11	-
Rising	21.16.22.00	2009.02.11	-
SecureWeb-Gateway	6.7.6	2009.02.11	Trojan.Rootkit.Gen
Sophos	4.38.0	2009.02.11	-
Sunbelt	3.2.1851.2	2009.02.11	-
Symantec	10	2009.02.11	Trojan Horse
TheHacker	6.3.1.85.252	2009.02.11	Trojan/Downloader.Agent.atiy
TrendMicro	8.700.0.1004	2009.02.11	-
VBA32	3.12.8.12	2009.02.11	Trojan-Downloader.Win32.Agent.atiy
ViRobot	2009.2.11.1600	2009.02.11	-
VirusBuster	4.5.11.0	2009.02.10	-

To KL

尤金卡巴斯基

NATIVE.EXE

No malicious code was found in this file.

Sincerely yours,
Mikhail Gorshenin,
Virus Analyst.
_____________________
Kaspersky Lab Ltd
Moscow, Russia

马灵耀

可能是特洛伊木马的变种
可以删除的，我用瑞星杀除过。

dokhell

native

Sherry.ai

没有危害的残留