武林无双 - 2008-9-10 0:31:00
以上是截图，请问这属于不属于误杀呢？
2008杀不杀这这个文件呢
还有个文件是WXASCR。SCR
这个是挂机锁文件。文件在附件里，在世界扫描引擎查了，扫描结果也在跟贴中。
文件在压缩包中两个。
文件 esales.dll 接收于 2008.09.10 16:02:38 (CET)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| AhnLab-V3 | 2008.9.6.0 | 2008.09.10 | - |
| AntiVir | 7.8.1.28 | 2008.09.10 | - |
| Authentium | 5.1.0.4 | 2008.09.10 | - |
| Avast | 4.8.1195.0 | 2008.09.10 | - |
| AVG | 8.0.0.161 | 2008.09.10 | - |
| BitDefender | 7.2 | 2008.09.10 | - |
| CAT-QuickHeal | 9.50 | 2008.09.10 | - |
| ClamAV | 0.93.1 | 2008.09.10 | - |
| DrWeb | 4.44.0.09170 | 2008.09.10 | - |
| eSafe | 7.0.17.0 | 2008.09.10 | Suspicious File |
| eTrust-Vet | 31.6.6082 | 2008.09.10 | - |
| Ewido | 4.0 | 2008.09.10 | - |
| F-Prot | 4.4.4.56 | 2008.09.09 | - |
| F-Secure | 8.0.14332.0 | 2008.09.10 | - |
| Fortinet | 3.112.0.0 | 2008.09.10 | - |
| GData | 19 | 2008.09.10 | - |
| Ikarus | T3.1.1.34.0 | 2008.09.10 | - |
| K7AntiVirus | 7.10.450 | 2008.09.10 | - |
| Kaspersky | 7.0.0.125 | 2008.09.10 | - |
| McAfee | 5380 | 2008.09.09 | - |
| Microsoft | 1.3903 | 2008.09.10 | - |
| NOD32v2 | 3429 | 2008.09.09 | - |
| Norman | 5.80.02 | 2008.09.10 | - |
| Panda | 9.0.0.4 | 2008.09.09 | Suspicious file |
| PCTools | 4.4.2.0 | 2008.09.10 | - |
| Prevx1 | V2 | 2008.09.10 | - |
| Rising | 20.61.22.00 | 2008.09.10 | - |
| Sophos | 4.33.0 | 2008.09.10 | - |
| Sunbelt | 3.1.1616.1 | 2008.09.09 | - |
| Symantec | 10 | 2008.09.10 | - |
| TheHacker | 6.3.0.9.077 | 2008.09.10 | - |
| TrendMicro | 8.700.0.1004 | 2008.09.10 | - |
| VBA32 | 3.12.8.5 | 2008.09.10 | - |
| ViRobot | 2008.9.10.1371 | 2008.09.10 | - |
| VirusBuster | 4.5.11.0 | 2008.09.10 | - |
| Webwasher-Gateway | 6.6.2 | 2008.09.10 | - |
| 附加信息 | |||
| File size: 184832 bytes | |||
| MD5...: dfeee62cd323513c6c99374590e3470f | |||
| SHA1..: 18976396bc53165d2eb189a7959d88f7f148930c | |||
| SHA256: c1f40dde3d1b6b6d3fea6616ed30804e8f902c330406a16004f6ee3db97fc13b | |||
| SHA512: 450d009a2e6cd3d56301cb525fb71d7d75c55a3c236905d2e2fc314ffdb1a148<BR>b2c89e1803719e36022bf5e9c9ca37e9781e2992e044aca870260e0895e22dc6 | |||
| PEiD..: ASPack v2.12 | |||
| TrID..: File type identification<BR>ASPack compressed Win32 Executable (generic) (85.7%)<BR>Win32 Executable Generic (5.4%)<BR>Win32 Dynamic Link Library (generic) (4.8%)<BR>Win16/32 Executable Delphi generic (1.3%)<BR>Generic Win/DOS Executable (1.2%) | |||
| PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x476001<BR>timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 10 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>CODE 0x1000 0x61000 0x28200 8.00 83415f6dc845186701f10e3f58df943b<BR>DATA 0x62000 0x2000 0x800 7.79 46a0363174d90a0caf23a8a367af367d<BR>BSS 0x64000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR>.idata 0x65000 0x3000 0xe00 7.54 53502b076e8b242011d82184236e6caf<BR>.tls 0x68000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR>.rdata 0x69000 0x1000 0x200 0.20 e2f4d1a0e4708179652a409b429c4312<BR>.reloc 0x6a000 0x7000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR>.rsrc 0x71000 0x5000 0x1800 6.80 a30006ef630b82b8c32fcc355b31e84e<BR>.aspack 0x76000 0x2000 0x1c00 4.89 59ae0e2d16304fea7a8f86e136142104<BR>.adata 0x78000 0x1000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR><BR>( 11 imports ) <BR>> kernel32.dll: GetProcAddress, GetModuleHandleA, LoadLibraryA<BR>> user32.dll: GetKeyboardType<BR>> advapi32.dll: RegQueryValueExA<BR>> oleaut32.dll: SysFreeString<BR>> advapi32.dll: RegQueryValueExA<BR>> gdi32.dll: UnrealizeObject<BR>> user32.dll: WindowFromPoint<BR>> oleaut32.dll: SafeArrayPtrOfIndex<BR>> ole32.dll: CreateStreamOnHGlobal<BR>> oleaut32.dll: GetErrorInfo<BR>> comctl32.dll: ImageList_SetIconSize<BR><BR>( 0 exports ) <BR> | |||
| packers (F-Prot): Aspack | |||
| packers (Kaspersky): ASPack | |||
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; cafe8; Sicent)
附件: esales.rar