今天用无毒空间扫出这个东西，VT一半报毒。

1162195070

啊，这是360管家里下载的啊，晕死。                        

[size=0.9em]0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware. File name: 0460a5f2c40da8446dab813efe4a4bac_1kg_su.exe Submission date: 2010-12-15 05:40:16 (UTC) Current status: finished Result: 20 /43 (46.5%)

VT Community [size=0.8em]not reviewed [size=0.8em] Safety score: -

Compact
Print results

Antivirus	Version	Last Update	Result
AhnLab-V3	2010.12.15.00	2010.12.14	Trojan/Win32.Gen
AntiVir	7.11.0.36	2010.12.14	-
Antiy-AVL	2.0.3.7	2010.12.15	Trojan/win32.agent
Avast	4.8.1351.0	2010.12.15	-
Avast5	5.0.677.0	2010.12.15	-
AVG	9.0.0.851	2010.12.14	-
BitDefender	7.2	2010.12.15	Trojan.Generic.4927136
CAT-QuickHeal	11.00	2010.12.15	-
ClamAV	0.96.4.0	2010.12.14	PUA.Packed.ASPack
Command	5.2.11.5	2010.12.15	-
Comodo	7065	2010.12.14	TrojWare.Win32.FlyStudio.NMY0
DrWeb	5.0.2.03300	2010.12.15	-
Emsisoft	5.1.0.1	2010.12.15	Trojan.SuspectCRC!IK
eSafe	7.0.17.0	2010.12.14	-
eTrust-Vet	36.1.8041	2010.12.14	Win32/FlyAgent!generic
F-Prot	4.6.2.117	2010.12.14	-
F-Secure	9.0.16160.0	2010.12.15	Trojan.Generic.4927136
Fortinet	4.2.254.0	2010.12.13	W32/Dx.UGI!tr
GData	21	2010.12.15	Trojan.Generic.4927136
Ikarus	T3.1.1.90.0	2010.12.15	Trojan.SuspectCRC
Jiangmin	13.0.900	2010.12.15	-
K7AntiVirus	9.72.3246	2010.12.14	-
Kaspersky	7.0.0.125	2010.12.15	-
McAfee	5.400.0.1158	2010.12.15	Generic.dx!ugi
McAfee-GW-Edition	2010.1C	2010.12.15	Generic.dx!ugi
Microsoft	1.6402	2010.12.14	-
NOD32	5703	2010.12.14	a variant of Win32/Packed.FlyStudio
Norman	6.06.12	2010.12.14	W32/DLoader.AHYXT
nProtect	2010-12-15.01	2010.12.15	Trojan.Generic.4927136
Panda	10.0.2.7	2010.12.14	Trj/CI.A
PCTools	7.0.3.5	2010.12.15	Trojan.Gen
Prevx	3.0	2010.12.15	-
Rising	22.78.01.01	2010.12.15	-
Sophos	4.60.0	2010.12.15	-
SUPERAntiSpyware	4.40.0.1006	2010.12.15	-
Symantec	20101.3.0.103	2010.12.15	Trojan.Gen
TheHacker	6.7.0.1.101	2010.12.15	-
TrendMicro	9.120.0.1004	2010.12.15	-
TrendMicro-HouseCall	9.120.0.1004	2010.12.15	-
VBA32	3.12.14.2	2010.12.14	-
VIPRE	7658	2010.12.15	-
ViRobot	2010.12.15.4201	2010.12.15	Backdoor.Win32.Hupigon.50222
VirusBuster	13.6.94.0	2010.12.14	-

Additional information Show all

MD5   : 0460a5f2c40da8446dab813efe4a4bac

SHA1  : 38aae7725fd891764fb5d50f744398f06a7f2740

SHA256: 0fdc195aa1daa996fbc0e4efaa47c85675e38edc117b0a3ffa13cd52589a6f80

留侯

已上报大蜘蛛

zuo

2010-12-19 20:17:14    读文件    允许
进程: c:\documents and settings\administrator\桌面\1kg_su\1kg_su.exe
目标: C:\WINDOWS\system32\ole32.dll
规则: [文件组]限制读取的文件 -> [文件]c:\windows\system32; ole32.dll

oneappleliu

上报红伞

1162195070

回复 3楼 zuo 的帖子

不算毒吧？

我是新手

kkgh

费尔  Trojan.Sjhybtc.rusn.arc

s8706042

已上報趨勢嚕~

尤金卡巴斯基

To KL

猪头无双

红伞无视，上报；怎么看怎么像是我装的一键ghost何止像啊，不就是嘛