毒网上的

The EQs

BD的特征码识别率和多重启发式是偶最欣赏的。。

wangjay1980

detected: Trojan program Backdoor.Win32.Agent.air        File: C:\Documents and Settings\Owner\×ÀÃæ\e.rar/e.exe\NORTON.SYS

soul20010

恩，比较别扭的是这个软件做的不好，界面乱，稳定性不高。。。

taihuxian

文件 C:\Documents and Settings\user\Local Settings\Application Data\Mozilla\Firefox\Profiles\zbjecx7c.default\Cache\EE80DB19d01/e.exe\NORTON.SYS: 检测到 木马程序'Backdoor.Win32.Agent.air'.

jlennon

cheninot

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
539039  e.rar 40.34 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
537877  e.exe  41.5 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
e.exe  MALWARE

The file 'e.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.NSAnti.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

上报小红伞鸟

netsurfe

KIS 307没有报

zhou98331

测试了 卡巴报，微点 也报

wj730327

tracydk

Starting the file scan:

Begin scan in 'F:\样本\e.rar'
F:\样本\e.rar
  [0] Archive type: RAR
  --> e.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      The file was deleted!