发新话题
打印

请高手帮忙脱壳,怀疑有木马!

请高手帮忙脱壳,怀疑有木马!

运行后卡巴没报,但软件有沙漏,感觉有后门,而且进程里有2个.高手帮忙脱壳检查一下是否含有木马,感激不尽!附件屠龙多开器破解版.rar(116.01 KB)2008-5-25 21:57, 下载次数: 10

levis,李维斯

收藏10个帖子点亮QQ新图标,超酷!点击下面按钮即可 收藏到QQ书签

TOP

VirusTotal在线扫描结果。
反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.5.22.1 2008.05.23 -
AntiVir 7.8.0.19 2008.05.25 TR/Crypt.XPACK.Gen
Authentium 5.1.0.4 2008.05.23 W32/Heuristic-210!Eldorado
Avast 4.8.1195.0 2008.05.25 -
AVG 7.5.0.516 2008.05.24 Generic10.OYI
BitDefender 7.2 2008.05.25 Packer.PESpin.A
CAT-QuickHeal 9.50 2008.05.24 (Suspicious) - DNAScan
ClamAV 0.92.1 2008.05.25 PUA.Packed.PESpin
DrWeb 4.44.0.09170 2008.05.25 Win32.HLLW.Autoruner.1891
eSafe 7.0.15.0 2008.05.22 Win32.Virut.b
eTrust-Vet 31.4.5817 2008.05.23 -
Ewido 4.0 2008.05.25 -
F-Prot 4.4.4.56 2008.05.23 W32/Heuristic-210!Eldorado
F-Secure 6.70.13260.0 2008.05.25 W32/Suspicious_N.gen
Fortinet 3.14.0.0 2008.05.25 -
GData 2.0.7306.1023 2008.05.23 -
Ikarus T3.1.1.26.0 2008.05.25 Packed.Win32.Klone.af
Kaspersky 7.0.0.125 2008.05.25 -
McAfee 5302 2008.05.23 New Malware.aq
Microsoft None 2008.05.25 -
NOD32v2 3128 2008.05.23 -
Norman 5.80.02 2008.05.23 -
Panda 9.0.0.4 2008.05.25 Suspicious file
Rising 20.45.42.00 2008.05.23 -
Sophos 4.29.0 2008.05.25 Mal/Packer
Sunbelt 3.0.1123.1 2008.05.17 -
Symantec 10 2008.05.25 -
TheHacker 6.2.92.318 2008.05.23 W32/Behav-Heuristic-063
VBA32 3.12.6.6 2008.05.25 -
VirusBuster 4.3.26:9 2008.05.25 Packed/NSPack
Webwasher-Gateway 6.6.2 2008.05.25 Trojan.Crypt.XPACK.Gen
附加信息
File size: 118792 bytes
MD5...: 765c56dc37e1f03bb078b0a723adb161
SHA1..: aa252efc79c61b0e61e3d5ad5b48196862787ba5
SHA256: a0be920ffbaf4ac7a46c37c0f88e4e22f8aa9db7c7cb539ef4402fa65dd5c0a3
SHA512: 88eddc8d4533e5ab5bfad51bfcac6582fa798017963337e05a0e0a03a3d1d82a
a2c5314271067d589e35cfd337bb73e10a9bbb43d72b10ba3b2adccfc210ec59
PEiD..: -
PEInfo: -
packers (Authentium): NSPack, PE_Patch, NSPack, PE_Patch, Troj-Crypt.E
packers (Kaspersky): NSPack, NSPack, PESpin
packers (F-Prot): NSPack, PE_Patch, Troj-Crypt.E

TOP

楼上你写的看不懂呀

TOP

一半以上的扫毒引擎都说,这文件有问题。

TOP

引用:
引用:
原帖由 SANHAO 于 2008-5-25 23:01 发表
楼上你写的看不懂呀
是病毒啊

TOP

用个HIPS跟踪一下吧  现在没虚拟机...抱歉了

TOP

TOP

PEInfo: -
packers (Authentium): NSPack, PE_Patch, NSPack, PE_Patch, Troj-Crypt.E
packers (Kaspersky): NSPack, NSPack, PESpin
packers (F-Prot): NSPack, PE_Patch, Troj-Crypt.E

免杀北斗壳,是特洛伊木马!

TOP

发新话题