joewang2003 發表於 2009-6-16 01:25:52

請問附件內的兩個檔案到底有沒有病毒阿?

請問附件內的兩個檔案到底有沒有病毒阿?
用online scan, 45% 的掃毒軟體說有;55%說沒有
請高手辨別一下. tks


PS: please don't ask me what these two files can do but you can guess

VirusTotal 是一款可疑檔案分析服務===>http://www.virustotal.com/zh-tw/

AnyxxxDxx....exe ==>

反病毒引擎版本最後更新掃瞄結果a-squared4.5.0.182009.06.15Packer.PESpin!IKAhnLab-V35.0.0.22009.06.15-AntiVir7.9.0.1872009.06.15-Antiy-AVL2.0.3.12009.06.15-Authentium5.1.2.42009.06.15W32/Heuristic-210!EldoradoAvast4.8.1335.02009.06.15-AVG8.5.0.3392009.06.15-BitDefender7.22009.06.15Packer.PESpin.ACAT-QuickHeal10.002009.06.15(Suspicious) - DNAScanClamAV0.94.12009.06.15-Comodo13332009.06.15-DrWeb5.0.0.121822009.06.15-eSafe7.0.17.02009.06.15Suspicious FileeTrust-Vet31.6.65562009.06.12-F-Prot4.4.4.562009.06.14W32/Heuristic-210!EldoradoF-Secure8.0.14470.02009.06.15-Fortinet3.117.0.02009.06.15-GData192009.06.15Packer.PESpin.AIkarusT3.1.1.59.02009.06.15Packer.PESpinK7AntiVirus7.10.7622009.06.12-Kaspersky7.0.0.1252009.06.15-McAfee56462009.06.14-McAfee+Artemis56462009.06.14Artemis!CECFE71C33D7McAfee-GW-Edition6.7.62009.06.15Win32.Malware.gen (suspicious)Microsoft1.47012009.06.15-NOD3241562009.06.15-Norman2009.06.15W32/Packed_PeSpin.BnProtect2009.1.8.02009.06.15-Panda10.0.0.142009.06.14-PCTools4.4.2.02009.06.12Packed/PeSpinPrevx3.02009.06.15High Risk System Back DoorRising21.34.04.002009.06.15Trojan.DL.Win32.Mnless.dttSophos4.42.02009.06.15Mal/PackerSunbelt3.2.1858.22009.06.14Trojan.Win32.Packer.PESpinv1.32 (v)Symantec1.4.4.122009.06.15Backdoor.SdbotTheHacker6.3.4.3.3452009.06.15W32/Behav-Heuristic-070TrendMicro8.950.0.10922009.06.15Cryp_PESpinVBA323.12.10.72009.06.14-ViRobot2009.6.15.17872009.06.15-VirusBuster4.6.5.02009.06.15Packed/PeSpin附加訊息
反病毒引擎版本最後更新掃瞄結果a-squared4.5.0.182009.06.15Packer.PESpin!IKAhnLab-V35.0.0.22009.06.15-AntiVir7.9.0.1872009.06.15-Antiy-AVL2.0.3.12009.06.15-Authentium5.1.2.42009.06.15W32/Heuristic-210!EldoradoAvast4.8.1335.02009.06.15-AVG8.5.0.3392009.06.15-BitDefender7.22009.06.15Packer.PESpin.ACAT-QuickHeal10.002009.06.15(Suspicious) - DNAScanClamAV0.94.12009.06.15-Comodo13332009.06.15-DrWeb5.0.0.121822009.06.15-eSafe7.0.17.02009.06.15Suspicious FileeTrust-Vet31.6.65562009.06.12-F-Prot4.4.4.562009.06.14W32/Heuristic-210!EldoradoF-Secure8.0.14470.02009.06.15-Fortinet3.117.0.02009.06.15-GData192009.06.15Packer.PESpin.AIkarusT3.1.1.59.02009.06.15Packer.PESpinK7AntiVirus7.10.7622009.06.12-Kaspersky7.0.0.1252009.06.15-McAfee56462009.06.14-McAfee+Artemis56462009.06.14Artemis!CECFE71C33D7McAfee-GW-Edition6.7.62009.06.15Win32.Malware.gen (suspicious)Microsoft1.47012009.06.15-NOD3241562009.06.15-Norman2009.06.15W32/Packed_PeSpin.BnProtect2009.1.8.02009.06.15-Panda10.0.0.142009.06.14-PCTools4.4.2.02009.06.12Packed/PeSpinPrevx3.02009.06.15High Risk System Back DoorRising21.34.04.002009.06.15Trojan.DL.Win32.Mnless.dttSophos4.42.02009.06.15Mal/PackerSunbelt3.2.1858.22009.06.14Trojan.Win32.Packer.PESpinv1.32 (v)Symantec1.4.4.122009.06.15Backdoor.SdbotTheHacker6.3.4.3.3452009.06.15W32/Behav-Heuristic-070TrendMicro8.950.0.10922009.06.15Cryp_PESpinVBA323.12.10.72009.06.14-ViRobot2009.6.15.17872009.06.15-VirusBuster4.6.5.02009.06.15Packed/PeSpin附加訊息

反病毒引擎版本最後更新掃瞄結果a-squared4.5.0.182009.06.15Packer.PESpin!IKAhnLab-V35.0.0.22009.06.15-AntiVir7.9.0.1872009.06.15-Antiy-AVL2.0.3.12009.06.15-Authentium5.1.2.42009.06.15W32/Heuristic-210!EldoradoAvast4.8.1335.02009.06.15-AVG8.5.0.3392009.06.15-BitDefender7.22009.06.15Packer.PESpin.ACAT-QuickHeal10.002009.06.15(Suspicious) - DNAScanClamAV0.94.12009.06.15-Comodo13332009.06.15-DrWeb5.0.0.121822009.06.15-eSafe7.0.17.02009.06.15Suspicious FileeTrust-Vet31.6.65562009.06.12-F-Prot4.4.4.562009.06.14W32/Heuristic-210!EldoradoF-Secure8.0.14470.02009.06.15-Fortinet3.117.0.02009.06.15-GData192009.06.15Packer.PESpin.AIkarusT3.1.1.59.02009.06.15Packer.PESpinK7AntiVirus7.10.7622009.06.12-Kaspersky7.0.0.1252009.06.15-McAfee56462009.06.14-McAfee+Artemis56462009.06.14Artemis!CECFE71C33D7McAfee-GW-Edition6.7.62009.06.15Win32.Malware.gen (suspicious)Microsoft1.47012009.06.15-NOD3241562009.06.15-Norman2009.06.15W32/Packed_PeSpin.BnProtect2009.1.8.02009.06.15-Panda10.0.0.142009.06.14-PCTools4.4.2.02009.06.12Packed/PeSpinPrevx3.02009.06.15High Risk System Back DoorRising21.34.04.002009.06.15Trojan.DL.Win32.Mnless.dttSophos4.42.02009.06.15Mal/PackerSunbelt3.2.1858.22009.06.14Trojan.Win32.Packer.PESpinv1.32 (v)Symantec1.4.4.122009.06.15Backdoor.SdbotTheHacker6.3.4.3.3452009.06.15W32/Behav-Heuristic-070TrendMicro8.950.0.10922009.06.15Cryp_PESpinVBA323.12.10.72009.06.14-ViRobot2009.6.15.17872009.06.15-VirusBuster4.6.5.02009.06.15Packed/PeSpin

Fox.Killer...exe====>

檔案 Fox_Killer_v6.exe 接收於 2009.06.15 08:07:56 (UTC)
反病毒引擎版本最後更新掃瞄結果a-squared4.5.0.182009.06.15-AhnLab-V35.0.0.22009.06.14-AntiVir7.9.0.1872009.06.15-Antiy-AVL2.0.3.12009.06.15-Authentium5.1.2.42009.06.14W32/Heuristic-210!EldoradoAvast4.8.1335.02009.06.14-AVG8.5.0.3392009.06.14-BitDefender7.22009.06.15-CAT-QuickHeal10.002009.06.15-ClamAV0.94.12009.06.15Trojan.Qhost-165Comodo13332009.06.15-DrWeb5.0.0.121822009.06.15-eSafe7.0.17.02009.06.11Suspicious FileeTrust-Vet31.6.65562009.06.12-F-Prot4.4.4.562009.06.14-F-Secure8.0.14470.02009.06.15-Fortinet3.117.0.02009.06.15PossibleThreatGData192009.06.15-IkarusT3.1.1.59.02009.06.15-K7AntiVirus7.10.7622009.06.12Trojan.Win32.Malware.3Kaspersky7.0.0.1252009.06.15-McAfee56462009.06.14-McAfee+Artemis56462009.06.14-McAfee-GW-Edition6.7.62009.06.15-Microsoft1.47012009.06.15-NOD3241532009.06.14-Norman6.01.092009.06.12-nProtect2009.1.8.02009.06.15-Panda10.0.0.142009.06.14Suspicious filePCTools4.4.2.02009.06.12-Prevx3.02009.06.15High Risk WormRising21.34.01.002009.06.15-Sophos4.42.02009.06.15-Sunbelt3.2.1858.22009.06.14<ENCRYPTED Archive>Symantec1.4.4.122009.06.15-TheHacker6.3.4.3.3452009.06.13-TrendMicro8.950.0.10922009.06.15DDOS_YFLOOD.BVBA323.12.10.72009.06.14-ViRobot2009.6.15.17862009.06.15-VirusBuster4.6.5.02009.06.14-

一正大神 發表於 2009-6-16 03:50:35

我的NOD32沒掃到!

andyfang 發表於 2009-6-16 17:14:49

Symantec Endpoint Protection 說有毒,
把它放到隔離區了。

木馬程式 Backdoor.sdbot
頁: [1]
查看完整版本: 請問附件內的兩個檔案到底有沒有病毒阿?