fs服务支持也太死板了……

显示全部楼层 · 发表于 2008-3-9 12:14:21

因为fs对游侠压的电子书误报问题一直没解决
就想自己上报一下
第一次把样本用winrar打了一个包，顺带截了系统控制拦截的报告图
用False positive! 主题发送后得到如下回复：
Dear Sir,
Thank you for contacting F-Secure.
With regards to your enquiry, Please send us your scanning report by attaching the file FSAV_REP from the following location:
Step 1: Click on C drive
Step 2: Double click on 'Program Files'
Step 3: Double click on 'F-Secure'
Step 4: Double click on 'Anti-Virus'
Step 5: Look for the file with the name 'FSAV_REP'

Please feel free to contact us again should you need further assistance.

Thank you.

Best regards,

Ashwin
--
Ashwin Karthigayan
Support Engineer          US: +1-866-295-2725
F-Secure Corporation    UK: +44(0)870-0130-793
BE SURE.                      http://support.f-secure.com

写那么多其实就是让我发送扫描报告……可这是系统控制拦截的啊！
没办法只好用蹩脚的英文回复:
Problem description:

Dear Sir,

It can't be detected by ON-DEMAND SCANNING!
However,once I try to open it,it will be blocked.
Furthermore,exclusion appears to haveno effect.
I have to disable System Control if I want to read the book.
All of this kind of e-books have the same destiny.
False positive detection name : W32/Agent.WNT  or  W32/Smalltroj.BMBV
Thanks!

没想到得到的回复又是：
Dear Sir,

Thank you for contacting F-Secure.

With regards to your enquiry, could you please send us the scanning report.Kindly run a full computer scan on your computer and attach the scanning report in your reply. Follow the instructions below to attach the scanning report.

Step 1: Open your email client and find the last message from F-Secure and click Reply
Step 2: Click on Attachment (Add file)
Step 3: Click on Browse
Step 3: Click on the drop down arrow on the top and Click on My Computer
Step 4: Double click on Local Disk (C:)
Step 5: Double click on Program Files
Step 6: Double click on F-Secure (F-Secure Internet Security)
Step 7: Double click on Anti-Virus
Step 8: Double click on the FSAV_CMD file
Step 9: Repeat steps 2 - 7 to attach another file
Step 10: Double click on the FSAV_REP file

We will look into the scanning report and investigate this issue further.

Please feel free to contact us again should you need further assistance.

Thank you.

Best regards,

Ashwin
--
Ashwin Karthigayan
Support Engineer          US: +1-866-295-2725
F-Secure Corporation    UK: +44(0)870-0130-793
BE SURE.                      http://support.f-secure.com

靠，气死我了，再也不上报了……

显示全部楼层 · 发表于 2008-3-9 20:23:49

唔，貌似官方想要详细的扫描报告，没招啊，楼主看时关掉system control吧～～
FS的上报算不错了，N多杀软压根就不鸟你……

显示全部楼层 · 发表于 2008-3-10 12:53:49

你把系统控制的窗口截图寄给FS就行了

显示全部楼层 · 发表于 2008-3-10 18:11:11

原帖由 wolffshen 于 2008-3-10 12:53 发表
你把系统控制的窗口截图寄给FS就行了

第一次发邮件俺就把样本和截图一起发过去了
可是人家非要扫描报告
明明告诉他过扫描不过监控了，怎么还可能有扫描报告呢……

显示全部楼层 · 发表于 2008-3-10 18:38:00

呵呵，同感，也遇到过同样的问题，耐心点就好了
你的电子书哪里下的啊，我去看看

显示全部楼层 · 发表于 2008-3-10 22:25:01

就是游侠压的那种攻略宝典
那种类型的电子书ms开着系统控制都打不开

显示全部楼层 · 发表于 2008-3-10 22:54:03

看不懂~

显示全部楼层 · 发表于 2008-3-10 22:58:23

去游侠下了个，上报了，看FS会怎么回复

显示全部楼层 · 发表于 2008-3-11 00:32:08

FS对于误报的回复还是挺快的
Hello,

Thank you for your e-mail.

The file you submitted is indeed clean. A database update will be released to resolve this issue.

We apologize for any inconveniences that this may have brought you.

Should you have further questions, please do not hesitate to email us again.

Have a nice day!

--
F-Secure Security Labs http://www.f-secure.com/weblog/
F-Secure Corporation http://www.f-secure.com/
BE SURE.

显示全部楼层 · 发表于 2008-3-11 17:06:57

没有那么麻烦吧，我上次提交一个电子书沙盘误报，啥都没附带，就在网页提交的原文件，过几天就不报了。
或者报给norman

[讨论] fs服务支持也太死板了……

回复 4楼 gongfu 的帖子