疑似病毒，也可能是电子书（9/43）

wjcharles

看到这个帖子http://bbs.kafan.cn/thread-793841-1-1.html，去帖中所述网站随便下了本“电子书”，运行后被nis2011的sonar查杀

“电子书”下载地址http://dl.q766.com/down/2010918/2301892110.rar


























也可以去这个网站http://www.q766.com/下点东西试试，估计都有问题

VT结果：

[size=0.9em]0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware. File name: Soft_Q7661026.exe Submission date: 2010-09-18 15:20:22 (UTC) Current status: finished Result: 9/ 43 (20.9%)

VT Community [size=0.8em]not reviewed [size=0.8em] Safety score: -

Compact
Print results

Antivirus	Version	Last Update	Result
AhnLab-V3	2010.09.18.00	2010.09.17	-
AntiVir	8.2.4.58	2010.09.18	TR/Dropper.Gen
Antiy-AVL	2.0.3.7	2010.09.18	-
Authentium	5.2.0.5	2010.09.18	-
Avast	4.8.1351.0	2010.09.18	-
Avast5	5.0.594.0	2010.09.18	-
AVG	9.0.0.851	2010.09.18	-
BitDefender	7.2	2010.09.18	-
CAT-QuickHeal	11.00	2010.09.18	-
ClamAV	0.96.2.0-git	2010.09.18	Exploit.MS03-43
Comodo	6117	2010.09.18	Worm.Win32.Dropper.gen_1446545
DrWeb	5.0.2.03300	2010.09.18	-
Emsisoft	5.0.0.37	2010.09.18	Virus.Win32.OnLineGames!IK
eSafe	7.0.17.0	2010.09.17	-
eTrust-Vet	36.1.7862	2010.09.17	-
F-Prot	4.6.1.107	2010.09.18	-
F-Secure	9.0.15370.0	2010.09.18	Trojan:W32/DelfInject.R
Fortinet	4.1.143.0	2010.09.18	-
GData	21	2010.09.18	-
Ikarus	T3.1.1.88.0	2010.09.18	Virus.Win32.OnLineGames
Jiangmin	13.0.900	2010.09.17	-
K7AntiVirus	9.63.2552	2010.09.18	-
Kaspersky	7.0.0.125	2010.09.18	-
McAfee	5.400.0.1158	2010.09.18	-
McAfee-GW-Edition	2010.1C	2010.09.18	-
Microsoft	1.6201	2010.09.18	-
NOD32	5459	2010.09.18	probably a variant of Win32/PSW.QQPass.NGR
Norman	6.06.06	2010.09.18	-
nProtect	2010-09-18.01	2010.09.18	-
Panda	10.0.2.7	2010.09.18	Suspicious file
PCTools	7.0.3.5	2010.09.18	-
Prevx	3.0	2010.09.18	-
Rising	22.65.05.00	2010.09.18	-
Sophos	4.57.0	2010.09.18	-
Sunbelt	6892	2010.09.18	Trojan-Spy.Win32.Agent (fs)
SUPERAntiSpyware	4.40.0.1006	2010.09.18	-
Symantec	20101.1.1.7	2010.09.18	-
TheHacker	6.7.0.0.023	2010.09.18	-
TrendMicro	9.120.0.1004	2010.09.18	-
TrendMicro-HouseCall	9.120.0.1004	2010.09.18	-
VBA32	3.12.14.0	2010.09.17	-
ViRobot	2010.9.18.4048	2010.09.18	-
VirusBuster	12.65.13.0	2010.09.18	-

Additional information Show all

MD5   : bf4573e36ae608a430df122d48bd9502

SHA1  : d9ab4ccbf96518eb63052cc088ae9a5408b900fc

SHA256: 3bb283f7bd5f61b79209b511fd53b9ddb3dc672517bcd9548297086a56c2311f

VT Community

[size=0.75em]

This file has never been reviewed by any VT Community member. Be the first one to comment on it!

VirusTotal Team

hdp112233

回复 1楼 wjcharles  的帖子

2266

vmzy

360sd漏了，上报。

pipi1987

回复 2楼 hdp112233  的帖子

综合征不浅啊！！
   

网名丢失

呵呵，红伞杀

414447992

金山词霸？这个也拦

wjcharles

金山词霸？这个也拦
414447992 发表于 2010.9.19 18:01

哪来的金山词霸？

414447992

回复 8楼 wjcharles  的帖子

你不会慢慢看嘛