卡巴没反应，360直接击杀

显示全部楼层 · 发表于 2017-3-9 10:26:29

如题，给你们的杀软试试。
作为卡巴粉的我，被我同事说我传输病毒给他，心里不平衡

显示全部楼层 · 发表于 2017-3-9 10:45:19

avast kill

显示全部楼层 · 发表于 2017-3-9 10:47:36

AVAST双击正常打开,SEP A杀

显示全部楼层 · 发表于 2017-3-9 10:51:32

那就帮你上报下让你开开心呗！

显示全部楼层 · 发表于 2017-3-9 11:10:00

文件名: 图片助手.exe
威胁名称: Trojan.Gen.2完整路径: c:\users\desktop\图片助手.exe

____________________________

____________________________

在电脑上
2017/3/9 ( 11:09:08 )

上次使用时间
2017/3/9 ( 11:09:12 )

启动项
否

已启动
否

威胁类型: 病毒。将自身插入或附加到其他程序、文件或电脑区域以感染这些媒介的程序。

____________________________

图片助手.exe 威胁名称: Trojan.Gen.2
定位

极少用户信任的文件
Norton 社区中有不到 5 名用户使用了此文件。

极新的文件
该文件已在不到 1 周前发行。

高
此文件具有高风险。

____________________________

https://att.kafan.cn/forum.php?mo ... jA3ODZ8MjA3OTg1Ng==
已下载文件从 att.kafan.cn
来源: 外部介质

winrar.exe

创建的文件:
图片助手.exe

____________________________

文件操作

文件: c:\Users\Desktop\ 图片助手.exe 威胁已删除
____________________________

文件指纹 - SHA:
57332ee1305ddc3de6ec9c8f9809b1f21274f7e6a4f5b6f6ec23e48809a541f1
文件指纹 - MD5:
ed82ff1655e5c366c90cc02c24a2fc0b

显示全部楼层 · 发表于 2017-3-9 11:29:38

小红伞未报

显示全部楼层 · 发表于 2017-3-9 11:35:57

打开正常，应该不是病毒

显示全部楼层 · 发表于 2017-3-9 12:04:37

avast 杀

显示全部楼层 · 发表于 2017-3-9 13:15:08

360双击没杀啊

显示全部楼层 · 发表于 2017-3-9 21:19:48

本帖最后由尘梦幽然于 2017-3-9 21:21 编辑

@pal家族卡巴是对的，360和诺顿都是误报了。
[mw_shl_code=css,true]Upon further analysis and investigation we have verified your submission and, as such, the detection(s) for the following file(s) will be removed from our products:
File name: .exe
MD5: ed82ff1655e5c366c90cc02c24a2fc0b
SHA256: 57332ee1305ddc3de6ec9c8f9809b1f21274f7e6a4f5b6f6ec23e48809a541f1
Note: Whitelisting is available by downloading a RAPID RELEASE indicated in the Further Information section below or via the next Live Update
Further Information:
Required RAPID RELEASE sequence >= 184042
The latest Rapid Release definition available here: ftp://ftp.symantec.com/AVDEFS/norton_antivirus/rapidrelease
To check the current sequence number of the Rapid Release definition: http://www.symantec.com/security ... itions/rapidrelease
More information on Rapid Release definitions can be found: https://support.symantec.com/en_US/article.TECH103326.html
If detection persists, please contact support:
* Norton: https://support.norton.com/sp/en/us/home/current/info
* SEP: https://support.symantec.com/en_US/endpoint-protection.54619.html
Decisions made by Symantec are subject to change if alterations to the Software are made over time or as classification criteria and/or the policy employed by Symantec changes over time to address the evolving landscape.
If you are a software vendor and would like to upload your software for proactive whitelisting, please complete one of the following forms:
* If you are BCS customer: https://submit.symantec.com/whitelist/bcs
* Otherwise: https://submit.symantec.com/whitelist
For more information on best practices to reduce false positives:
http://www.symantec.com/content/ ... _first_WP.en-us.pdf
Sincerely,
Symantec Security Response
http://securityresponse.symantec.com[/mw_shl_code]

[可疑文件] 卡巴没反应，360直接击杀

本帖子中包含更多资源

本帖子中包含更多资源

评分