内部有HOOK和安装驱动的行为,但已经全部做了签名了,不知道为什么还是会被杀,我一直理解的只要有数字签名杀软就会放过去了,但是实际情况却完全不一样
请帮着分析一下,谢谢了
下面的是在virscan上的结果,只有瑞星报有毒,晕死了。。。。。。。
VirSCAN.org Scanned Report :
Scanned time : 2011/09/15 11:24:55 (CST)
Scanner results: 3%的杀软(1/37)报告发现病毒
File Name : DocumentOutCtrl.rar
File Size : 679177 byte
File Type : RAR archive data, v1d, os
MD5 : b3e45cb6859de738e521ecf2f1deabc2
SHA1 : b35a01cd1b05d738d318c658507122644a99f3ee
Online report :
http://r.virscan.org/fa3ec443d35f9bd26023828a97756a26Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 5.1.0.3 20110914231619 2011-09-14 1.32 -
安博士V3 2011.09.15.00 2011.09.15 2011-09-15 2.20 -
AntiVir 8.2.6.60 7.11.14.204 2011-09-14 0.31 -
安天 2.0.18 20110915.12513023 2011-09-15 0.02 -
Arcavir 2011 201109061639 2011-09-06 2.67 -
Authentium 5.1.1 201109141739 2011-09-14 1.56 -
AVAST! 4.7.4 110914-1 2011-09-14 0.17 -
AVG 8.5.850 271.1.1/3897 2011-09-15 0.33 -
BitDefender 7.90123.9115667 7.39021 2011-09-15 4.51 -
ClamAV 0.97.1 13618 2011-09-15 0.77 -
Comodo 5.1 10116 2011-09-14 2.94 -
CP Secure 1.3.0.5 2011.09.12 2011-09-12 0.54 -
Dr.Web 5.0.2.3300 2011.09.15 2011-09-15 15.31 -
F-Prot 4.6.2.117 20110914 2011-09-14 0.91 -
F-Secure 7.02.73807 2011.09.14.06 2011-09-14 12.65 -
飞塔 4.2.257 14.129 2011-09-14 0.10 -
GData 22.2018 20110915 2011-09-15 0.11 -
ViRobot 20110914 2011.09.14 2011-09-14 0.35 -
Ikarus T3.1.32.20.0 2011.09.15.79367 2011-09-15 6.58 -
江民杀毒 13.0.900 2011.09.14 2011-09-14 1.79 -
卡巴斯基 5.5.10 2011.09.15 2011-09-15 0.84 -
金山毒霸 2009.2.5.15 2011.9.15.9 2011-09-15 0.89 -
迈克菲 5400.1158 6469 2011-09-14 10.29 -
Microsoft 1.7604 2011.09.14 2011-09-14 5.34 -
NOD32 3.0.21 6463 2011-09-14 0.20 -
Norman 6.07.11 6.07.00 2011-09-14 18.02 -
熊猫卫士 9.05.01 2011.09.14 2011-09-14 2.39 -
趋势科技 9.500-1005 8.430.01 2011-09-14 0.12 -
Quick Heal 11.00 2011.09.14 2011-09-14 1.86 -
瑞星 20.0 23.75.02.02 2011-09-14 2.71 Trojan.Win32.Hook.ev
Sophos 3.23.2 4.69 2011-09-15 4.18 -
Sunbelt 3.9.2500.2 10477 2011-09-14 3.21 -
赛门铁克 1.3.0.24 20110914.004 2011-09-14 0.43 -
nProtect 20110914.01 12726925 2011-09-14 1.84 -
The Hacker 6.7.0.1 v00296 2011-09-13 0.78 -
VBA32 3.12.16.4 20110914.0956 2011-09-14 6.51 -
VirusBuster 5.3.0.4 14.0.212.0/61664052011-09-14 0.00 -
用户系统信息:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.825.0 Safari/535.1