24个样本 解压后扫描此包会引起小红伞V8扫描器崩溃

will

24个


奇怪的是解压后扫描此文件夹会引起小红伞V8扫描器崩溃       屡试不爽
扫描日志里有出错记录：

C:\Documents and Settings\Administrator\Desktop\Copy of s\a17.exe
      [WARNING]   An exception has been identified!
      [WARNING]   In the module 'avcore.dll' an exception occured.
Calling the function AVEPROC_TestFile in file: \\C:\Documents]C:\Documents and Settings\Administrator\Desktop\Copy of s\a17.exe
Error description:ACCESS_VIOLATION
  EAX = 00000067  EBX = FFFFFFFF
  ECX = 3FFFE3DE  EDX = 00000002
  ESI = 028F358E  EDI = 00f80000
  EIP = 00F8891C  EBP = 01CDEEDC
  ESP = 01CDEED4  Flg = 00010202
  CS = 00000023   SS = 0000001B

请其他v8用户测试一下

Bug 上报官方后现已得到回复！ 确认为V8的bug,此bug将在下次更新后修复！

Hi yimikeroy,

thanks for reporting  and testing. This is a bug and we are able to reproduce this. Our devoloper have fix this. The fix will available with the next Update.

regards
haschuette

最新消息   此bug已经在今晚20:00更新后解决！
更新后的引擎版本为 8.00.00.43

[ 本帖最后由 yimike 于 2007-11-29 20:02 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\s[1].part1.rar'
E:\s[1].part1.rar
  [0] Archive type: RAR
  --> s\a1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> s\a10.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> s\a11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.itq
  --> s\a12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iza
  --> s\a13.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> s\a14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iuw
  --> s\a15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ivl.7
  --> s\a16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.ikc
  --> s\a17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwx.1
  --> s\a18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iso
  --> s\a19.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.22884
  --> s\a2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> s\a20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> s\a21.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> s\a22.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> s\a23.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.24932
      [INFO]      The file was deleted!
Begin scan in 'E:\s[1].part2.rar'
E:\s[1].part2.rar
  [0] Archive type: RAR
  --> s\a4.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> s\a5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> s\a7.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
  --> s\a8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.inn
  --> s\a9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ijw
  --> s\aTxHMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> s\aupxdnd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月29日  11:12
Used time: 00:25 min

The scan has been done completely.

      0 Scanning directories
     25 Files were scanned
     22 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

will

你用的是V8吗？  V8的话解压时候扫描文件夹  看小红伞的扫描器会不会崩溃

Graybird

我用V7~

will

   
好吧   等待V8用户的反馈！！！！

hahacomcn

V8不怎么样啊，卡。

wu19934718

没有用过，不太清楚哦。。

wu19934718

费尔19个。

gmen_pliskin

用v8，没有崩溃

scottxzt

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  bbs.kafan.cn/attachment.php?aid=160244
Information:  Is the Trojan horse TR/Crypt.FSPM.Gen