NOD32 Found probably unknown NewHeur_PE

显示全部楼层 · 发表于 2007-5-9 19:28:07

File:  xiaoqci.rar
Status:  INFECTED/MALWARE
MD5  81b295ab74e809c41a937f8a28da3785
Packers detected:  -

Scanner results
Scan taken on 09 May 2007 11:18:12 (GMT)
A-Squared  Found nothing
AntiVir  Found HEUR/Malware
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found Downloader.Small
BitDefender  Found Generic.Malware.dld!!.55838D8F
ClamAV  Found nothing
Dr.Web  Found DLOADER.Trojan (probable variant)
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-5-9 19:29:02

Starting the file scan:

Begin scan in 'F:\样本\xiaoqci.rar'
F:\样本\xiaoqci.rar
  [0] Archive type: RAR
  --> xiaoqci.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-9 19:30:07

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.

--------------------------------------------------------------------------------

We received the following archive files:

File ID  Filename  Size (Byte) Result
540279  xiaoqci.rar 1.25 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
540280  xiaoqci.exe  2 KB  UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename Result
xiaoqci.exe  UNDER ANALYSIS

The file 'xiaoqci.exe' has been determined to be 'UNDER ANALYSIS'.

--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2007-5-9 19:37:22

晕死，发不了图了

[ 本帖最后由 jlennon 于 2007-5-9 19:46 编辑 ]

显示全部楼层 · 发表于 2007-5-9 19:38:04

KIS 7 miss...

显示全部楼层 · 发表于 2007-5-9 19:46:34

显示全部楼层 · 发表于 2007-5-9 19:53:34

能否谈谈使用CYB的感觉啊

显示全部楼层 · 发表于 2007-5-9 20:00:25

原帖由 scottxzt 于 2007-5-9 19:53 发表
能否谈谈使用CYB的感觉啊

刚开始使用，再用1个月就写一篇试用心得。初步感觉数字鹰不如SSM严谨，有些动作无法拦截，拦截下来的报告也不如SSM详细，很多拦截窗口都没有显示可疑文件所在路径，而SSM可以定位父子程序所在位置

显示全部楼层 · 发表于 2007-5-9 20:29:05

软件的定位就不一样，一个专业HIPS，一个智能的主动防御，和微点比较还差不多。

显示全部楼层 · 发表于 2007-5-9 20:36:57

PCC右MISS

[病毒样本] NOD32 Found probably unknown NewHeur_PE

本帖子中包含更多资源

AVIRA也是启发

本帖子中包含更多资源

回复 #1 观弈书童的帖子

回复 #8 观弈书童的帖子

[病毒样本] NOD32 Found probably unknown NewHeur_PE

本帖子中包含更多资源

AVIRA也是启发

本帖子中包含更多资源

回复 #1 观弈书童 的帖子

回复 #8 观弈书童 的帖子

回复 #1 观弈书童的帖子

回复 #8 观弈书童的帖子