刚才无意中看到朋友说群共享有文件分享。好奇的就把压缩包下载了。解压，V8主动防御没有收获。
打开之前用V8扫描，才有发现。是一个恶意软件。
放到virustotal扫描一遍(发现virustotal有时不支持中文的文件名，变成了下划线)。各位请过目。
文件 _____________________.rar 接收于 2008.04.26 09:07:38 (CET)
结果: 8/32 (25%)
| 反病毒引擎 | 版本 | 最后更新 | 扫描结果 |
| AhnLab-V3 | 2008.4.25.2 | 2008.04.25 | - |
| AntiVir | 7.8.0.10 | 2008.04.25 | JS/Dldr.Exploit |
| Authentium | 4.93.8 | 2008.04.26 | HTML/CodeBase |
| Avast | 4.8.1169.0 | 2008.04.25 | VBS:Malware-gen |
| AVG | 7.5.0.516 | 2008.04.25 | - |
| BitDefender | 7.2 | 2008.04.26 | - |
| CAT-QuickHeal | 9.50 | 2008.04.26 | - |
| ClamAV | 0.92.1 | 2008.04.26 | Trojan.Downloader.HTML.Codebase |
| DrWeb | 4.44.0.09170 | 2008.04.26 | - |
| eSafe | 7.0.15.0 | 2008.04.21 | suspicious Trojan/Worm |
| eTrust-Vet | 31.3.5736 | 2008.04.26 | - |
| Ewido | 4.0 | 2008.04.25 | - |
| F-Prot | 4.4.2.54 | 2008.04.25 | HTML/CodeBase |
| F-Secure | 6.70.13260.0 | 2008.04.26 | - |
| FileAdvisor | 1 | 2008.04.26 | - |
| Fortinet | 3.14.0.0 | 2008.04.26 | - |
| Ikarus | T3.1.1.26.0 | 2008.04.26 | - |
| Kaspersky | 7.0.0.125 | 2008.04.26 | - |
| McAfee | 5282 | 2008.04.25 | - |
| Microsoft | 1.3408 | 2008.04.22 | - |
| NOD32v2 | 3056 | 2008.04.26 | - |
| Norman | 5.80.02 | 2008.04.25 | - |
| Panda | 9.0.0.4 | 2008.04.26 | Suspicious file |
| Prevx1 | V2 | 2008.04.26 | - |
| Rising | 20.41.50.00 | 2008.04.26 | - |
| Sophos | 4.28.0 | 2008.04.26 | - |
| Sunbelt | 3.0.1056.0 | 2008.04.17 | - |
| Symantec | 10 | 2008.04.26 | - |
| TheHacker | 6.2.92.293 | 2008.04.26 | - |
| VBA32 | 3.12.6.5 | 2008.04.26 | suspected of Win32.Trojan.Downloader |
| VirusBuster | 4.3.26:9 | 2008.04.25 | - |
| Webwasher-Gateway | 6.6.2 | 2008.04.26 | - |
| 附加信息 |
| File size: 225246 bytes |
| MD5...: 8da3c6d838b5e6a4fe8a382dd8ce2b92 |
| SHA1..: 7ee213fa0dfdaeacc826d36ca807060604cfa5a9 |
| SHA256: 27af292c896579812330b90e6f110a74c601fbb6bd5f4ad48c7d717094e46143 |
SHA512: dae1f2a3eb59417bd906fd0b20cade2ba0715e850978280bd99fed4a80990cbb
d7fe83ea9b6defa5082ffa7d9624da7cb980e7104eedc4d83101dd809c00dc3c |
| PEiD..: - |
| PEInfo: - |
| packers (Kaspersky): UPX, PE_Patch |
| packers (F-Prot): UPX |
| packers (Authentium): Unicode, UPX |
压缩包解压密码：virus
