貌似Mcafee误报任务管理器（增强版）！

显示全部楼层 · 发表于 2007-4-19 16:15:22

这是任务管理器增强版，在2004年都有了，相信还有很多人在用。
Mcafee报他为特洛伊！咔吧沉默！
大家分析一下！

显示全部楼层 · 发表于 2007-4-19 16:24:03

Packers detected:  PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT

Scanner results
Scan taken on 19 Apr 2007 08:22:37 (GMT)
AntiVir  Found BDS/Eggdrop.AP
ArcaVir  Found nothing
Avast  Found Win32:Trojan-gen. {Other}
AVG Antivirus  Found nothing
BitDefender  Found Backdoor.Eggdrop.AP
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found Possibly a new variant of W32/Threat-SysVenFakP-based!Maximus
F-Secure Anti-Virus  Found nothing
Fortinet  Found BackDoor.U!tr
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-4-19 16:24:04

原帖由 Cloud018 于 2007-4-19 16:15 发表
这是任务管理器增强版，在2004年都有了，相信还有很多人在用。
Mcafee报他为特洛伊！咔吧沉默！
大家分析一下！

确实有木马,小A的启发报了

显示全部楼层 · 发表于 2007-4-19 16:28:12

很多杀软是对加壳工具有反应的。。。所以得找用微点的来试试。。。

显示全部楼层 · 发表于 2007-4-19 16:38:18

原帖由 EQ2 于 2007-4-19 16:28 发表
很多杀软是对加壳工具有反应的。。。所以得找用微点的来试试。。。

找我这个不用微点的也可以哦

初步分析，没有文件生成，没有可以的注册表操作，良民一个

显示全部楼层 · 发表于 2007-4-19 16:51:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\TASKMGR.rar'
C:\Documents and Settings\user\桌面\TASKMGR.rar
  [0] Archive type: RAR
  --> TASKMGR.EXE
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Eggdrop.AP Backdoor server programs
   [INFO]    A backup was created as '467a2dcd.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年4月19日  16:51
Used time: 00:01 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-4-19 16:56:43

谁有工具，查查什么壳，把它脱下来看看！我在School，没有工具！

显示全部楼层 · 发表于 2007-4-19 17:02:41

PECompact 2.5 Retail -> Jeremy Collake

脱壳，不会

显示全部楼层 · 发表于 2007-4-19 17:48:48

显示全部楼层 · 发表于 2007-4-19 18:00:38

可能是误报，呵呵

貌似Mcafee误报任务管理器（增强版）！

本帖子中包含更多资源

有微点的运行下

本帖子中包含更多资源

用刚刚升过级的最新的小红伞杀一下

本帖子中包含更多资源