p版误杀winrar3.71中default.sfx文件为病毒

显示全部楼层 · 发表于 2008-2-29 19:49:32

用红伞p版一点时间了全盘扫描也不少次了，头一次报winrar文件带毒

“带毒”文件已提取大侠们分析一下吧

显示全部楼层 · 发表于 2008-2-29 20:00:43

是报了：

Begin scan in 'C:\Documents and Settings\haha\桌面\Default.rar'
C:\Documents and Settings\haha\桌面\Default.rar
  [0] Archive type: RAR
  --> Default.SFX
   [DETECTION] Contains detection pattern of the dropper DR/KillAV.FB.34
   [INFO]    A backup was created as '482df458.qua'  ( QUARANTINE )

不知道你的winrar哪里下载的。

显示全部楼层 · 发表于 2008-2-29 20:12:45

没有误杀啊~我的没有

Begin scan in 'C:\Program Files\WinRAR'

End of the scan: 2008年2月29日  20:12
Used time: 00:02 min

The scan has been done completely.

   2 Scanning directories
294 Files were scanned
   0 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
294 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-29 20:13:30

早就忘了在哪下载的了，去年10月份下载的

显示全部楼层 · 发表于 2008-2-29 20:44:47

回复的还真快，不到一个小时就给我发邮件了

The file 'Default.SFX' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-2-29 20:50:55

解决了就好

显示全部楼层 · 发表于 2008-2-29 21:04:51

我以前也出现过这个情况。
当时解压了一个带毒的文档（红伞当时杀掉了），然后用AVG扫盘，就扫出了这个sfx，重装winrar还是。最后找了另外一个版本的winrar才解决

[求助] p版误杀winrar3.71中default.sfx文件为病毒

本帖子中包含更多资源