Md5：c93cb红伞启发报

yitp

红伞启发报
应该是误报
Md5：c93cb9

[ 本帖最后由 yitp 于 2007-11-4 16:15 编辑 ]

BING126

KIS6没反应？

qigang

正常的吧。。

yitp

a-squared	3.0.0.126	2007.11.02	2007-11-02	-	3.400
AntiVir	7.6.0.30	7.0.0.165	2007-11-02	HEUR/Malware	3.120
Arcavir	1.0.4	200711032011	2007-11-03	-	2.874
AVAST	1.0.8	071103-0	2007-11-03	-	6.455
AVG	7.5.49.442	269.15.14/1100	2007-10-30	-	4.106
BitDefender	7.60825.937670	7.15657	2007-11-04	-	7.100
CA (VET)	8.4.0.24	31.2.5264	2007-11-03	-	0.853
ClamAV	0.91.2	4671	2007-11-04	-	0.245
Comodo	2.11	2.0.0.333	2007-11-03	-	1.570
Dr.WEB	4.44.0.9170	2007.11.03	2007-11-03	-	3.584
ewido	4.0.0.2	2007.11.03	2007-11-03	-	2.270
F-PROT	4.4.1.52	20071103	2007-11-03	-	3.195
F-SECURE	5.51.6100	2007.11.02.02	2007-11-02	-	0.062
IKARUS	T3.1.01.15	2007.11.04.69764	2007-11-04	-	1.716
MKS_VIR	2.01	2007.11.03	2007-11-03	-	3.586
NOD32	2.70.10	2636	2007-11-03	-	0.090
NORMAN	5.91.08	5.90	2007-11-02	-	9.605
nProtect	2007-11-03.00	1019615	2007-11-03	-	8.555
Prevx	V2	20071104	2007-11-04	-	11.202
QuickHeal	9.00	2007.11.03	2007-11-03	-	2.501
SOPHOS	2.49.1	4.21	2007-11-04	-	11.548
The Hacker	6.2.9	v00110	2007-10-26	-	1.083
VBA32	3.12.2.4	20071103.0757	2007-11-03	-	3.490
ViRobot	20071102	2007.11.02	2007-11-02	-	1.166
VirusBuster	4.3.19:9	9.113.10/11.0	2007-11-03	-	2.222
卡巴斯基	5.5.10	2007.11.04	2007-11-04	-	12.753
安博士V3	2007.11.03.00	2007.11.03	2007-11-03	-	1.414
江民杀毒	10.00.650	2007.11.03	2007-11-03	-	1.317
熊猫卫士	9.04.03.0001	2007.11.03	2007-11-03	-	3.039
瑞星	19.0	20.16.60.00	2007-11-04	-	1.709
赛门铁克	1.3.0.24	20071103.005	2007-11-03	-	0.238
趋势	8.500-1001	4.810.24	2007-11-03	-	0.044
迈克菲	5.2.00	5155	2007-11-02	-	2.488
金山毒霸	2007.6.20.249	2007.11.2	2007-11-02	-	0.937
飞塔	2.81-3.11	8.321	2007-11-03	-	2.045

scottxzt

无法测试.LZ上传的文件不对.

SONGBOWEN

卡巴6飘，BitDefender 2008飘……
红伞启发……
Begin scan in 'C:\Documents and Settings\Administrator\桌面\lhlcb.rar'
C:\Documents and Settings\Administrator\桌面\lhlcb.rar
  [0] Archive type: RAR
  --> lhlcb.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

SONGBOWEN

等一会发沙盘报告……

SONGBOWEN

已经向红伞上报……

SONGBOWEN

Hello,

Thanks for taking the time to submit your samples to the Norman
Sandbox Information Center.  Customer delight is our top priority at
Norman.  With that in mind we have developed Sandbox Solutions for
organizations that are committed to speedy analysis and debugging.

Norman Sandbox Solutions give your organization the opportunity to
analyze files immediately in your own environment.

To find out how to bring the power of Norman Sandbox into your test
environments follow the links below.

Norman Sandbox Solutions
http://www.norman.com/Product/Sandbox-products/

Norman Sandbox Analyzer
http://www.norman.com/Product/Sandbox-products/Analyzer/

Norman Sandbox Analyzer Pro
http://www.norman.com/Product/Sandbox-products/Analyzer-pro/

Norman SandBox Reporter
http://www.norman.com/Product/Sandbox-products/Reporter/

&#26700 : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS
    * Compressed: NO

[ General information ]
    * File length:        62976 bytes.
    * MD5 hash: 411a5726896a4b079d7287c60668f631.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

This file is not flagged as malicious by the Norman Sandbox Information Center. However, we can not guarantee that the file is harmless. If you still suspect the file to be malicious and if you urgently need to know for sure, please submit it to your local Norman support department for manual analysis.


************************************
Sent from an unmonitored email address.
Please DO NOT reply.
************************************


看来又是红伞误报啊～～