Cameradll.dll是蠕虫？

显示全部楼层 · 发表于 2009-4-13 17:17:14

可疑，是蠕虫？大伙分析分析。。。

[ 本帖最后由Ｕｓｇｅｔ于 2009-4-13 17:26 编辑 ]

显示全部楼层 · 发表于 2009-4-13 17:22:15

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=511835&k=3e75e0fbfae564877174cf2586978be7&t=1239614501"
a virus or unwanted program 'TR/Agent.207226.F' [trojan] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2009-4-13 17:37:46

加了个北斗，误报而已，各位都别TO了，休息下吧，

显示全部楼层 · 发表于 2009-4-13 17:58:50

北斗兼容性，壓縮比不错.

显示全部楼层 · 发表于 2009-4-13 18:15:48

Warning

--------------------------------------------------------------------------------

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.

--------------------------------------------------------------------------------

Requested URL: http://bbs.kafan.cn/attachment.p ... 2d&t=1239617724
Information Is the TR/Agent.207226.F Trojan

--------------------------------------------------------------------------------

Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.138, VDF 7.1.3.42

显示全部楼层 · 发表于 2009-4-13 19:20:24

微点
蠕虫名称：Worm.Win32.Agent.nno

程序：
D:\SNAPSHOT\CAMERADLL.DLL
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2009-4-13 20:08:32

McAfee 报了2个。。

显示全部楼层 · 发表于 2009-4-13 20:11:30

CAMERADLL.DLL -------- 安全
SNAPSHOT.EXE -------- 安全

显示全部楼层 · 发表于 2009-4-13 21:54:11

分析下。似乎有点问题

显示全部楼层 · 发表于 2009-4-14 16:23:27

File ID    Filename    Size (Byte) Result
25320903    SNAPSHOT.rar 208.99 KB OK
A listing of files contained inside archives alongside their results can be found below:

File ID    Filename    Size (Byte) Result
25244884    SNAPSHOT.EXE    19.49 KB    FALSE POSITIVE
25309669    CAMERADLL.DLL    202.37 KB    FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result    SNAPSHOT.EXE    FALSE POSITIVE

The file 'SNAPSHOT.EXE' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.1.1.197.
Filename Result    CAMERADLL.DLL    FALSE POSITIVE

The file 'CAMERADLL.DLL' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

[病毒样本] Cameradll.dll是蠕虫？

本帖子中包含更多资源