[MD5: 2A114E]报的应该是误报

显示全部楼层 · 发表于 2007-11-3 18:23:04

番茄花园优化工具也有报的，应该是误报

显示全部楼层 · 发表于 2007-11-3 20:21:02

卡巴6未发现

小红伞：
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本(1).rar'
C:\Documents and Settings\Administrator\桌面\样本(1).rar
  [0] Archive type: RAR
  --> ·¬ÇÑ»¨Ô° Windows XP Pro SP2 ÏµÍ³ÓÅ»¯¹¤¾ß 1.0.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.288 Backdoor server programs
   [WARNING] The file was ignored!

BD2008：
Remaining issues:Object Name Threat Name Final Status
C:\Documents and Settings\Administrator\桌面\样本(1).rar=]???????? Windows XP Pro SP2 ???????????? 1.0.exe Backdoor.Pcclient.GV Infected

应该不是误报，BD的误报率很低的……

显示全部楼层 · 发表于 2007-11-3 20:32:32

Hello,

Thanks for taking the time to submit your samples to the Norman
Sandbox Information Center.  Customer delight is our top priority at
Norman.  With that in mind we have developed Sandbox Solutions for
organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to
analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test
environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

&#26700 : Not detected by Sandbox (Signature: W32/Suspicious_N.gen)

[ DetectionInfo ]
* Sandbox name: NO_MALWARE
* Signature name: W32/Suspicious_N.gen
* Compressed: YES

[ General information ]
* File length:    491716 bytes.
* MD5 hash: 2a114ef6412855d7de870a36e9ef952d.

(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

************************************
Sent from an unmonitored email address.
Please DO NOT reply.
************************************

显示全部楼层 · 发表于 2007-11-3 20:33:31

很有可能带毒！！！
楼主要小心了！

显示全部楼层 · 发表于 2007-11-3 20:36:24

不是病毒，但可能会被报风险软件

显示全部楼层 · 发表于 2007-11-3 20:40:42

ESS过

显示全部楼层 · 发表于 2007-11-3 21:27:22

BD的误报很低？？第一次听说。。。。。另外看norman报的就知道为什么会误报了

[病毒样本] [MD5: 2A114E]报的应该是误报

本帖子中包含更多资源