我检查的冰刃怎么有毒啊，救救啊

显示全部楼层 · 发表于 2009-10-22 11:29:26

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.5.0.41	2009.10.16	-
AhnLab-V3	5.0.0.2	2009.10.16	-
AntiVir	7.9.1.35	2009.10.16	-
Antiy-AVL	2.0.3.7	2009.10.16	-
Authentium	5.1.2.4	2009.10.16	-
Avast	4.8.1351.0	2009.10.14	-
AVG	8.5.0.420	2009.10.16	-
BitDefender	7.2	2009.10.16	-
CAT-QuickHeal	10.00	2009.10.16	Trojan.Agent.ATV
ClamAV	0.94.1	2009.10.16	-
Comodo	2621	2009.10.16	-
DrWeb	5.0.0.12182	2009.10.16	-
eSafe	7.0.17.0	2009.10.15	Win32.PWSOnLineGames
eTrust-Vet	35.1.7071	2009.10.16	-
F-Prot	4.5.1.85	2009.10.15	-
F-Secure	8.0.14470.0	2009.10.16	-
Fortinet	3.120.0.0	2009.10.16	-
GData	19	2009.10.16	-
Ikarus	T3.1.1.72.0	2009.10.16	-
Jiangmin	11.0.800	2009.10.16	-
K7AntiVirus	7.10.872	2009.10.16	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.10.16	-
McAfee	5772	2009.10.15	-
McAfee+Artemis	5772	2009.10.15	-
McAfee-GW-Edition	6.8.5	2009.10.16	-
Microsoft	1.5101	2009.10.16	-
NOD32	4515	2009.10.16	-
Norman	6.03.02	2009.10.16	-
nProtect	2009.1.8.0	2009.10.15	Trojan/W32.Small.745472
Panda	10.0.2.2	2009.10.15	-
PCTools	4.4.2.0	2009.10.16	-
Prevx	3.0	2009.10.16	High Risk Worm
Rising	21.51.44.00	2009.10.16	-
Sophos	4.46.0	2009.10.16	-
Sunbelt	3.2.1858.2	2009.10.15	-
Symantec	1.4.4.12	2009.10.16	-
TheHacker	6.5.0.2.043	2009.10.15	-
TrendMicro	8.950.0.1094	2009.10.16	-
VBA32	3.12.10.11	2009.10.15	Malware-Cryptor.Win32.NSAnti.Gen.1
ViRobot	2009.10.16.1988	2009.10.16	-
VirusBuster	4.6.5.0	2009.10.15	-

附加信息

File size: 745472 bytes

MD5 : e655ba28d3b46fb917fbe6e4f1272648

SHA1 : 20255ba804cbc90ecdaac2b929fa88af43b11307

SHA256: 0b9512a93b47fd9a5b384d518a2b7af0206df31e1eb78161d5c5e27a70365b86

PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x2BF001
timedatestamp.....: 0x46D293EC (Mon Aug 27 11:05:48 2007)
machinetype.......: 0x14C (Intel I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xE7000 0x60E00 8.00 ccb128c4cac05c21c26ea881e0b76f09
.rdata 0xE8000 0x2B000 0x9A00 7.99 03bbc4f47de05c873569743b396e408e
.data 0x113000 0xD7000 0x3600 7.94 1f734b909e90930cf807ff20c250e6b7
.rsrc 0x1EA000 0xD5000 0x18C00 7.66 3284b14fe7eae1a5a015f3195abee57d
.aspack 0x2BF000 0x2F000 0x2F000 5.69 069d4c951bf69d1e860f7adefc082f85
.adata 0x2EE000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e

( 14 imports )

> advapi32.dll: LookupPrivilegeValueA
> comctl32.dll: ImageList_DrawEx
> comdlg32.dll: CommDlgExtendedError
> gdi32.dll: SetTextAlign
> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA
> ole32.dll: CoFreeUnusedLibraries
> oleaut32.dll: -
> oledlg.dll: -
> olepro32.dll: -
> psapi.dll: GetModuleFileNameExA
> shell32.dll: ShellExecuteA
> user32.dll: GetClassNameA
> winspool.drv: DocumentPropertiesA
> wsock32.dll: -

( 0 exports )

TrID : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

ThreatExpert: http://www.threatexpert.com/report.aspx?md5=e655ba28d3b46fb917fbe6e4f1272648

ssdeep: 12288:vOQJlfYMZv+S2T66aG1mqHIDN8oQ7MxCmd1lw24cHP3in6s2/WjDEnpA:rJlA8wT66aG1mqHw8x7McYt4Q3i6s2O6

Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=3D00FDA00002F86E60DD0B0A30135000BBB40AD1

PEiD : ASPack v2.12

packers (Kaspersky): ASPack

packers (F-Prot): Aspack

CWSandbox: http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=e655ba28d3b46fb917fbe6e4f1272648

RDS : NSRL Reference Data Set

各位高手说下怎么回事啊

显示全部楼层 · 发表于 2009-10-22 11:33:35

误报~

显示全部楼层 · 发表于 2009-10-22 11:35:51

呵呵，你检查一下狙剑，天琊，也会发现有毒。不放心可以去官网下载

显示全部楼层 · 发表于 2009-10-22 11:44:22

哦知道了谢谢了啊

显示全部楼层 · 发表于 2009-10-22 11:57:36

误报了，没事！

显示全部楼层 · 发表于 2009-10-22 11:58:39

明显只有几个善于报壳的杀软。

显示全部楼层 · 发表于 2009-10-22 12:03:48

什么年代冰刃会被报毒？

显示全部楼层 · 发表于 2009-10-22 15:53:22

正常，我去测也是一样

显示全部楼层 · 发表于 2009-10-22 18:02:53

会误报ark工具的杀软直接不要用就行了，基本都是不灵的

显示全部楼层 · 发表于 2009-10-22 19:05:22

你不放心的话去冰刃官网下1.20版不报毒

[求助] 我检查的冰刃怎么有毒啊，救救啊

回复 3楼 tawny2008 的帖子