红伞，卡巴报

显示全部楼层 · 发表于 2009-8-4 09:01:09

文件 PConPoint.exe 接收于 2009.08.04 00:53:34 (UTC)

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.5.0.24	2009.08.04	Trojan.Black!IK
AhnLab-V3	5.0.0.2	2009.08.03	Win-Trojan/Black.932864
AntiVir	7.9.0.240	2009.08.03	TR/Black.932864
Antiy-AVL	2.0.3.7	2009.08.03	-
Authentium	5.1.2.4	2009.08.03	W32/Internet-Trojan-patched-based!Maximus
Avast	4.8.1335.0	2009.08.04	-
AVG	8.5.0.406	2009.08.03	-
BitDefender	7.2	2009.08.04	-
CAT-QuickHeal	10.00	2009.08.03	Trojan.Agent.ATV
ClamAV	0.94.1	2009.08.04	-
Comodo	1856	2009.08.04	-
DrWeb	5.0.0.12182	2009.08.04	-
eSafe	7.0.17.0	2009.08.03	-
eTrust-Vet	31.6.6656	2009.08.04	-
F-Prot	4.4.4.56	2009.08.03	W32/Internet-Trojan-patched-based!Maximus
F-Secure	8.0.14470.0	2009.08.04	Packed.Win32.Black.d
Fortinet	3.120.0.0	2009.08.03	-
GData	19	2009.08.04	-
Ikarus	T3.1.1.64.0	2009.08.04	Trojan.Black
Jiangmin	11.0.800	2009.08.03	-
K7AntiVirus	7.10.809	2009.08.03	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.08.04	Packed.Win32.Black.d
McAfee	5697	2009.08.03	-
McAfee+Artemis	5697	2009.08.03	Artemis!5BEEA98864C4
McAfee-GW-Edition	6.8.5	2009.08.03	Heuristic.LooksLike.Win32.Suspicious.K
Microsoft	1.4903	2009.08.03	-
NOD32	4302	2009.08.03	-
Norman	6.01.09	2009.08.03	-
nProtect	2009.1.8.0	2009.08.03	Trojan/W32.Black.932864
Panda	10.0.0.14	2009.08.03	-
PCTools	4.4.2.0	2009.08.03	-
Prevx	3.0	2009.08.04	-
Rising	21.41.02.00	2009.08.03	-
Sophos	4.44.0	2009.08.04	-
Sunbelt	3.2.1858.2	2009.08.03	-
Symantec	1.4.4.12	2009.08.04	-
TheHacker	6.3.4.3.375	2009.08.01	Trojan/Black.d
TrendMicro	8.950.0.1094	2009.08.03	-
VBA32	3.12.10.9	2009.08.04	-
ViRobot	2009.8.3.1865	2009.08.03	-
VirusBuster	4.6.5.0	2009.08.03	-

附加信息
File size: 932864 bytes
MD5...: 5beea98864c4350bd23dd6b4d7b9b13c
SHA1..: a99aff4df1d5686ddb4c1cd75d9561127a25eeb6
SHA256: e4b4735f3db0b3c439a08ba1a3d8f1ba60a7bd1c40a126b08096c62168d8b43e
ssdeep: 24576:Anw/SplqvlcjKrvHDDSD5ZfF7vrEo/tM+QmXhVTzX:IwLuWrvHDWZfxTMn<BR>mRh<BR>
PEiD..: -
TrID..: File type identification<BR>Win32 Executable Generic (68.0%)<BR>Generic Win/DOS Executable (15.9%)<BR>DOS Executable Generic (15.9%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

显示全部楼层 · 发表于 2009-8-4 09:18:12

kv miss
to kv

显示全部楼层 · 发表于 2009-8-4 09:24:37

瑞星2010
Trojan.Win32.Generic.11EB0764

显示全部楼层 · 发表于 2009-8-4 14:22:06

Start of the scan: Tuesday, 4 August, 2009  14:21

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Tim\桌面\virus\PConPoint.rar'
C:\Documents and Settings\Tim\桌面\virus\PConPoint.rar
  [0] Archive type: RAR
[NOTE]    A backup was created as '4ae6d3bf.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
--> PConPoint.exe
   [DETECTION] Is the TR/Black.932864 Trojan

显示全部楼层 · 发表于 2009-8-4 18:01:43

To MP

显示全部楼层 · 发表于 2009-8-4 18:53:36

费尔在线扫描它是一个木马

显示全部楼层 · 发表于 2009-8-4 19:24:34

过金山毒霸极速版

显示全部楼层 · 发表于 2009-8-4 19:29:00

感觉像是中国的fake

显示全部楼层 · 发表于 2009-8-4 20:52:58

就是从辅助工具区下载的，红伞avk都报木马。

[可疑文件] 红伞，卡巴报

本帖子中包含更多资源

本帖子中包含更多资源