一木马下载物，求鉴定（已鉴定非病毒）

显示全部楼层 · 发表于 2011-5-3 21:36:31

Created:    2011/5/3 21:32:13
Summary:    Program Guard: InstallManager.exe -> BrandingURL.dll
Description:  C:\Users\xxxxx\Desktop\InstallManager\InstallManager.exe wants to create executable file C:\Users\xxxxxxxxxxxxxxxx\AppData\Local\Temp\nsk6F5B.tmp\BrandingURL.dll
Event type: Suspicious file(13)
Event action: Blocked(3)

显示全部楼层 · 发表于 2011-5-3 21:48:10

过360SD，金山kill，，，

显示全部楼层 · 发表于 2011-5-3 21:51:43

360网盾报毒

显示全部楼层 · 发表于 2011-5-3 22:51:51

已上报趋势～
未侦测到威胁～

显示全部楼层 · 发表于 2011-5-3 23:23:25

回复 10楼 aywps 的帖子

怎么我的没报

显示全部楼层 · 发表于 2011-5-3 23:43:48

怪了，360SD压缩包不报（已经勾选扫描压缩），解压就报

显示全部楼层 · 发表于 2011-5-4 05:10:39

414447992 发表于 2011-5-3 23:43
怪了，360SD压缩包不报（已经勾选扫描压缩），解压就报

右键？还是指定目录扫描？多用就习惯了~~有时有些压缩包上级目录，右键不报，进了样本目录后才提示是木马。

显示全部楼层 · 发表于 2011-5-4 05:51:15

损坏的，怪不得微点很意外地不报——微点对于这种典型木马基本全杀

File ID    Filename    Size (Byte) Result
26124387    InstallManager.7z 212.85 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID    Filename    Size (Byte) Result
26124388    InstallManager.exe    242.42 KB    DAMAGED FILE (UNKNOWN)

Please find a detailed report concerning each individual sample below:
Filename Result
InstallManager.exe    DAMAGED FILE (UNKNOWN)

The file 'InstallManager.exe' has been determined to be 'DAMAGED FILE (UNKNOWN)'. In particular this means that this file is damaged and not working properly. We could not find any malicious content. However the heuristic detection module may still detect this particular file even though it is damaged. In that case we will not adjust and remove detection for this damaged file.

显示全部楼层 · 发表于 2011-5-4 07:26:30

只有联网行为而已。没发现其它恶意行为了

http://camas.comodo.com/cgi-bin/ ... 111affded659be07d85

显示全部楼层 · 发表于 2011-5-4 08:44:23

卡巴依然miss

[可疑文件] 一木马下载物，求鉴定（已鉴定非病毒）

浏览过的版块