这个是怎么回事

显示全部楼层 · 发表于 2011-4-24 07:51:39

如图,官网下载的,各位给看盾是个什么情况.......
http://u.115.com/file/f5a4a76447#
iemate_1.1.4cn.7z

显示全部楼层 · 发表于 2011-4-24 08:12:14

cima没发现可疑行为，只有在临时文件夹里创建一些文件而已
不过，VT上有17款杀毒软件报警呢，先上报卡巴进行鉴定了

http://camas.comodo.com/cgi-bin/ ... 3626c3319a9b1055030

http://www.virustotal.com/file-s ... b1055030-1303603602

显示全部楼层 · 发表于 2011-4-24 08:19:54

阿努比斯分析此文件有加壳了，所以也可能只是报壳而已

NullSoft_PiMP_SFX vna SN: 1724

http://anubis.iseclab.org/?actio ... 5fe&format=html

显示全部楼层 · 发表于 2011-4-24 09:29:12

大蜘蛛clean，文件没有加壳，大蜘蛛无加壳和更改存档格式的记录。

显示全部楼层 · 发表于 2011-4-24 16:13:43

Start of the scan: 2011年4月24日  16:10

Starting the file scan:

Begin scan in 'C:\Users\\Desktop\iemate_1.1.4cn.7z'
C:\Users\\Desktop\iemate_1.1.4cn.7z
[0] Archive type: 7-Zip
  [DETECTION] Is the TR/IEProtect.36661 Trojan
  --> iemate_1.1.4cn.exe
[1] Archive type: NSIS
--> IEDriver.dll
[DETECTION] Is the TR/IEProtect.36661 Trojan

Beginning disinfection:
C:\Users\\Desktop\iemate_1.1.4cn.7z
[DETECTION] Is the TR/IEProtect.36661 Trojan
[NOTE]    The file was deleted!

End of the scan: 2011年4月24日  16:10
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   92 Files were scanned
   1 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   0 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   91 Files not concerned
   2 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2011-4-24 23:38:30

已上报趋势～
未侦测到威胁～

显示全部楼层 · 发表于 2011-4-24 23:56:18

运行修复工具后会修改主页为http://www.baidu.com/index.php?tn=iefix_dg&ch=11

[可疑文件] 这个是怎么回事

本帖子中包含更多资源