集体误报还是免杀？

wolffshen

过红伞、蜘蛛、卡系、诺大沙盘、铁壳等部分，其他大部分都报
File tsrnue.exe received on 02.20.2008 15:59:39 (CET)
Result: 21/32 (65.63%)

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.2.20.0	2008.02.20	Win-Trojan/ProcKill.1024
AntiVir	7.6.0.67	2008.02.20	-
Authentium	4.93.8	2008.02.20	W32/Rootkit.IU
Avast	4.7.1098.0	2008.02.20	Win32:Sheriff
AVG	7.5.0.516	2008.02.20	Downloader.Zlob.TLB
BitDefender	7.2	2008.02.20	Trojan.Spy.Sheriff.C
CAT-QuickHeal	9.50	2008.02.18	Trojan.Killav.DB
ClamAV	0.92.1	2008.02.20	Adware.SpySheriff-14
DrWeb	4.44.0.09170	2008.02.20	-
eSafe	7.0.15.0	2008.02.17	Win32.Pakes
eTrust-Vet	31.3.5550	2008.02.20	-
Ewido	4.0	2008.02.19	Trojan.ProcKill.DJ
FileAdvisor	1	2008.02.20	High threat detected
Fortinet	3.14.0.0	2008.02.19	W32/Killapp.A!tr
F-Prot	4.4.2.54	2008.02.19	W32/Rootkit.IU
F-Secure	6.70.13260.0	2008.02.20	-
Ikarus	T3.1.1.20	2008.02.20	Trojan.Win32.Zapchast.cp
Kaspersky	7.0.0.125	2008.02.20	-
McAfee	5233	2008.02.20	Generic ProcKill.a
Microsoft	1.3204	2008.02.20	-
NOD32v2	2889	2008.02.20	Win32/ProcKill.B
Norman	5.80.02	2008.02.19	-
Panda	9.0.0.4	2008.02.20	Suspicious file
Prevx1	V2	2008.02.20	Generic.Malware
Rising	20.32.22.00	2008.02.20	Trojan.Xtssksastsm
Sophos	4.26.0	2008.02.20	-
Sunbelt	3.0.884.0	2008.02.19	SpySheriff
Symantec	10	2008.02.20	-
TheHacker	6.2.9.224	2008.02.19	Downloader/LA
VBA32	3.12.6.1	2008.02.17	TR.Killav.DB.2
VirusBuster	4.3.26:9	2008.02.19	-
Webwasher-Gateway	6.6.2	2008.02.20	-

                        

Additional information

File size: 1024 bytes

MD5: 8ea684a850c9f72c5f0a1740bf50505a

SHA1: 6314aa73cd862a618a56ea9f022110f2b9b99fc2

PEiD: -

Bit9 info: http://fileadvisor.bit9.com/serv ... 72c5f0a1740bf50505a

Prevx info: http://info.prevx.com/aboutprogr ... 00335D72800B79BCD14

Graybird

The file 'tsrnue.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

wolffshen

高手帮忙解释一下为什么SBie会报这个呢？学习学习

taiw_1144

微点也报了
木马名称:Trojan.Win32.xtTro.a

程序:
C:\DOCUMENTS AND SETTINGS\WO\LOCAL SETTINGS\TEMP\RAR$EX00.672\TSRNUE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

xiaoxmj

信息        2008-02-20  23:28:58        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-02-20  23:28:58        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个                       
信息        2008-02-20  23:28:58        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-20  23:28:58        C:\Documents and Settings\Administrator\桌面\tsrnue.rar\tsrnue.exe        Win32.Troj.mstasks.1024        跳过，未处理       
信息        2008-02-20  23:28:46        金山毒霸主程序启动查毒过程，查毒方式：命令行查毒                       
信息        2008-02-20  23:28:45        金山毒霸主程序 启动                       
信息        2008-02-20  23:27:31        金山毒霸主程序 退出

挪威的冬天

沙盘跑不动 死的? 坏的?

[ 本帖最后由 挪威的冬天 于 2008-2-20 23:36 编辑 ]

无尽藏海

Hello, no malicious code was found in this file.

--
Best regards, Shvetsov Dmitry
Virus analyst, Kaspersky Lab.

e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/




> Attachment: tsrnue.rar

nosferatu

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        2:52:25 2008-2-21

+ Scan result:       



C:\Documents and Settings\Administrator\桌面\tsrnue.rar/tsrnue.exe -> Trojan.ProcKill.DJ : No action taken.


::Report end

wangjay1980

Hello,

tsrnue.exed

No malicious code was found in this file.