MD5: 3AB57E

红心王子

扫扫看

tracydk

wangjay1980

2007-6-21 JAY10:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\smile.rar/kaba\A0097881.dll//ASPack        ok        scanned
2007-6-21 JAY10:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\smile.rar/kaba\A0097877.dll//ASPack        ok        scanned

红心王子

因为是DLL，没有办法运行
看来我只好上报给KV了

yurius

bd报

Trojan.Zbox.210241.C

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\smile.rar'
C:\Documents and Settings\Administrator\My Documents\
  smile.rar
    [0] Archive type: RAR
    --> kaba\A0101642.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> kaba\A0097881.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> kaba\A0097877.dll
        [DETECTION] Is the Trojan horse TR/Zbox.210241.C
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

扫描日志
NOD32版本 2340 (20070620) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\smile.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 20.6.2007  时间：19:39:16
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\smile.rar
C:\Documents and Settings\Administrator\My Documents\ ?
?smile.rar >>RAR >>kaba\A0101642.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?smile.rar >>RAR >>kaba\A0097881.dll >>ASPack v2.12 -  ?
?是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?smile.rar >>RAR >>kaba\A0097877.dll >>ASPack v2.12 -  ?
?是正常的
已扫描的文件数目：3
已发现的病毒数目：0
完成时间： 19:39:16 总扫描时间：0 秒 (00:00:00)


[Scan path] C:\Documents and Settings\Administrator\My Documents\smile.rar
>C:\Documents and Settings\Administrator\My Documents\smile.rar\kaba\A0101642.dll - Ok
>>C:\Documents and Settings\Administrator\My Documents\smile.rar\kaba\A0097881.dll - Ok
>>C:\Documents and Settings\Administrator\My Documents\smile.rar\kaba\A0097877.dll - Ok
C:\Documents and Settings\Administrator\My Documents\smile.rar - Ok

wangjay1980

Hello,

A0097877.dll, A0097881.dll, A0101642.dll

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: smile.zip


卡巴说没问题

mofunzone

到底是不是病毒呀。。

mofunzone

We received the following archive files:
File ID          Filename          Size (Byte)         Result
1000696          smile.rar         221.67 KB         OK

A listing of files contained inside archives alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
222744          A0101642.dll          136 KB          FALSE POSITIVE
274965          A0097881.dll          48 KB          FALSE POSITIVE
204758          A0097877.dll          37.5 KB          MALWARE


Please find a detailed report concerning each individual sample below:
Filename         Result
A0101642.dll          FALSE POSITIVE

The file 'A0101642.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename         Result
A0097881.dll          FALSE POSITIVE

The file 'A0097881.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename         Result
A0097877.dll          MALWARE

The file 'A0097877.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Zbox.210241.C. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.37.01.133.

yashoo

咖啡不报