天人网络电视里有病毒！！

红心王子

刚才去了天人网络电视PPNTV的官方下载，KIS621的监控就不断的提示：

红心王子

检测到后门，会不会是升级程序，卡巴误报呢？

红心王子

KV报了，别小瞧国产

电影结束了

Time        Module        Object        Name        Threat        Action        User        Information
2007-5-4 7:35:34        IMON        self-extracting archive        http://www.ppntv.com/down/PPNtv_V3_Setup.exe        a variant of Win32/Agent.NEO trojan        Connection terminated        HOME-F31B62CA17\wangcheng

mofunzone

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\PPNtv_V3_Setup.exe'
C:\TDDOWNLOAD\
  PPNtv_V3_Setup.exe
    [0] Archive type: RAR SFX (self extracting)
    --> setupb.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> PPNtv_V3_Setup.exe
        [WARNING]   The file was ignored!

mofunzone

File:         setupb.rar
Status:         INFECTED/MALWARE
MD5         b900a67a5ba9237383bac02bc7c5ab56
Packers detected:         -

Scanner results
Scan taken on 03 May 2007 23:45:42 (GMT)
A-Squared         Found nothing
AntiVir         Found HEUR/Crypted
ArcaVir         Found nothing
Avast         Found nothing
AVG Antivirus         Found nothing
BitDefender         Found GenPack:Generic.Malware.Bdldg.13B033C5 (probable variant)
ClamAV         Found nothing
Dr.Web         Found nothing
F-Prot Antivirus         Found nothing
F-Secure Anti-Virus         Found Backdoor.Win32.Agent.ahj
Fortinet         Found nothing
Kaspersky Anti-Virus         Found Backdoor.Win32.Agent.ahj
NOD32         Found a variant of Win32/Agent.NEO
Norman Virus Control         Found nothing
Panda Antivirus         Found nothing
Rising Antivirus         Found nothing
VirusBuster         Found nothing
VBA32         Found Backdoor.Win32.Agent.ahj

jlennon

马力

驱逐舰不报