查看: 4232|回复: 10
收起左侧

[误报文件] 高质量,AntiVir报,不过好像是误报

[复制链接]
onlysee
发表于 2009-10-17 03:04:36 | 显示全部楼层 |阅读模式
文件 CIT.exe 接收于 2009.10.16 18:56:57 (UTC)
反病毒引擎版本最后更新扫描结果
a-squared4.5.0.412009.10.16Downloader.Express!IK
AhnLab-V35.0.0.22009.10.16-
AntiVir7.9.1.352009.10.16DR/Express.24576
Antiy-AVL2.0.3.72009.10.16-
Authentium5.1.2.42009.10.16-
Avast4.8.1351.02009.10.14-
AVG8.5.0.4202009.10.16-
BitDefender7.22009.10.16-
CAT-QuickHeal10.002009.10.16-
ClamAV0.94.12009.10.16-
Comodo26232009.10.16-
DrWeb5.0.0.121822009.10.16-
eSafe7.0.17.02009.10.15-
eTrust-Vet35.1.70722009.10.16-
F-Prot4.5.1.852009.10.16-
F-Secure9.0.15300.02009.10.16-
Fortinet3.120.0.02009.10.16-
GData192009.10.16-
IkarusT3.1.1.72.02009.10.16Downloader.Express
Jiangmin11.0.8002009.10.16-
K7AntiVirus7.10.8722009.10.16-
Kaspersky7.0.0.1252009.10.16-
McAfee57732009.10.16-
McAfee+Artemis57732009.10.16-
McAfee-GW-Edition6.8.52009.10.16Trojan.Dropper.Express.24576
Microsoft1.51012009.10.16-
NOD3245152009.10.16-
Norman6.03.022009.10.16-
nProtect2009.1.8.02009.10.15-
Panda10.0.2.22009.10.16-
PCTools4.4.2.02009.10.16-
Prevx3.02009.10.16-
Rising21.51.44.002009.10.16-
Sophos4.46.02009.10.16-
Sunbelt3.2.1858.22009.10.16-
Symantec1.4.4.122009.10.16-
TheHacker6.5.0.2.0432009.10.15-
TrendMicro8.950.0.10942009.10.16-
VBA323.12.10.112009.10.15-
ViRobot2009.10.16.19882009.10.16-
VirusBuster4.6.5.02009.10.16-

附加信息
File size: 24576 bytes
MD5...: c7d03f0171e9f7b8b1d7c65fea8fdae3
SHA1..: 74371ceda594740c549f73a7e2c326ee117f5149
SHA256: 28f8974c689d12c36fec310e33646a54f64b619e79c73076f7a8b4bb4777a010
ssdeep: 192:/TkP5NeTL3jNeTYI5D3h3CVN9+ESNeTYc3kNeT:/TkP5NebNeUI5D3h36hSN<BR>eUpNe<BR>
PEiD..: -
PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x1160<BR>timedatestamp.....: 0x4aafa3d6 (Tue Sep 15 14:25:26 2009)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 3 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x1f1c 0x2000 4.70 fc9c269a5e02c07cffc78c81ba698f11<BR>.data 0x3000 0x9e0 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110<BR>.rsrc 0x4000 0x15d0 0x2000 3.37 2ece5ca52a6cb69f09165adbfca549a8<BR><BR>( 1 imports ) <BR>> MSVBVM60.DLL: _CIcos, _adj_fptan, __vbaFreeVarList, __vbaEnd, _adj_fdiv_m64, _adj_fprem1, _adj_fdiv_m32, -, _adj_fdiv_m16i, _adj_fdivr_m16i, _CIsin, __vbaChkstk, EVENT_SINK_AddRef, _adj_fpatan, EVENT_SINK_Release, _CIsqrt, EVENT_SINK_QueryInterface, __vbaExceptHandler, _adj_fprem, _adj_fdivr_m64, __vbaFPException, _CIlog, _adj_fdiv_m32i, _adj_fdivr_m32i, _adj_fdivr_m32, _adj_fdiv_r, -, __vbaVarDup, _CIatan, _allmul, _CItan, _CIexp<BR><BR>( 0 exports ) <BR>
RDS...: NSRL Reference Data Set<BR>-
pdfid.: -
trid..: Generic Win/DOS Executable (49.9%)<BR>DOS Executable Generic (49.8%)<BR>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=c7d03f0171e9f7b8b1d7c65fea8fdae3' target='_blank'>http://www.threatexpert.com/repo ... 1d7c65fea8fdae3&;lt;/a>
sigcheck:<BR>publisher....: 0<BR>copyright....: n/a<BR>product......: Error<BR>description..: n/a<BR>original name: Error.exe<BR>internal name: Error<BR>file version.: 1.00<BR>comments.....: n/a<BR>signers......: -<BR>signing date.: -<BR>verified.....: Unsigned<BR>


[ 本帖最后由 onlysee 于 2009-10-17 03:06 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wevol
发表于 2009-10-17 03:26:30 | 显示全部楼层
报费尔~在线扫描为木马

[ 本帖最后由 wevol 于 2009-10-17 03:28 编辑 ]
benq80282
发表于 2009-10-17 07:51:20 | 显示全部楼层
AVG Free 9.0 未偵測到!
saibanzhizun
发表于 2009-10-17 10:50:12 | 显示全部楼层
费尔和卡巴没报
rok827
发表于 2009-10-17 10:51:32 | 显示全部楼层
to kl anyway
feixinglake
发表于 2009-10-17 11:24:53 | 显示全部楼层
红伞报  DR/Express.24576
angir
发表于 2009-10-17 17:32:41 | 显示全部楼层
运行后直接提示error……
上报微点
sam.to
发表于 2009-10-17 17:52:50 | 显示全部楼层
false alarm to antivir

The file 'CIT.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Express.24576. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection will be added to our virus definition file (VDF) with one of the next updates.


to kl,ll,mcafee,comodo,eset

http://sample.nod32.com.hk/index ... 7b8b1d7c65fea8fdae3

[ 本帖最后由 sam.to 于 2009-10-17 17:55 编辑 ]
sam.to
发表于 2009-10-17 18:25:06 | 显示全部楼层
Hello,

No malicious software was found in the attached file.
sam.to
发表于 2009-10-20 20:31:49 | 显示全部楼层
The file 'CIT.exe' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-4-20 04:26 , Processed in 0.091468 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表