红伞报毒，卡巴不报，发来大家鉴赏鉴赏

timhas266

原來是誤報

fljoan1

我看不太像是误报。这么多杀软报，而且报的都是灰鸽子，而且有些杀软是以大病毒库出名的，也就是说确实有灰鸽子的代码。但卡巴实验室怎么就说没发现病毒呢~~~

hj5abc

看看sb怎么说 ..

Womcc.exe : Not detected by Sandbox

[ DetectionInfo ]
    * Sandbox name: NO_MALWARE
    * Signature name: W32/Hupigon.FOQ (这个是特征码杀的)
    * Compressed: NO
    * TLS hooks: YES
    * Executable type: Application
    * Executable file structure: OK

[ General information ]
    * File length:      3202048 bytes.
    * MD5 hash: d790bd18ccfeead51919af27b9741a96.

[ Process/window information ]
    * Creates an event called .
    * Creates a mutex Windows Optimization Master.

这是鸽子 ?

ssyknuwyg

看名字的确是挥戈子

moonsilver

无法找到组件，程序无法启动


mp pass

无尽藏海

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00106788.




We received the following archive files:


File ID  Filename  Size (Byte) Result
3600389  Womcc.rar 1.01 MB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3600390  Womcc.exe  3.05 MB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

Filename Result  Womcc.exe  FALSE POSITIVE

The file 'Womcc.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=106788

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... ILgbs8ELHAnJvKsGYVn


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

挪威的冬天

缺少 wormp2p。dll

这个文件名真恶心