装CAD2008后,红伞扫到的《怀疑误报》

gogo8989

装CAD2008后,红伞扫到的


启发

[ 本帖最后由 gogo8989 于 2008-3-23 18:19 编辑 ]

gogo8989

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.3.22.1 2008.03.21 -
AntiVir 7.6.0.75 2008.03.22 HEUR/Malware
Authentium 4.93.8 2008.03.22 -
Avast 4.7.1098.0 2008.03.22 -
AVG 7.5.0.516 2008.03.22 -
BitDefender 7.2 2008.03.23 -
CAT-QuickHeal 9.50 2008.03.21 -
ClamAV 0.92.1 2008.03.23 -
DrWeb 4.44.0.09170 2008.03.22 -
eSafe 7.0.15.0 2008.03.18 suspicious Trojan/Worm
eTrust-Vet 31.3.5633 2008.03.21 -
Ewido 4.0 2008.03.22 -
F-Prot 4.4.2.54 2008.03.22 -
F-Secure 6.70.13260.0 2008.03.21 -
FileAdvisor 1 2008.03.23 -
Fortinet 3.14.0.0 2008.03.23 -
Ikarus T3.1.1.20 2008.03.23 -
Kaspersky 7.0.0.125 2008.03.23 -
McAfee 5257 2008.03.21 -
Microsoft 1.3301 2008.03.23 -
NOD32v2 2967 2008.03.21 -
Norman 5.80.02 2008.03.20 -
Panda 9.0.0.4 2008.03.22 Suspicious file
Prevx1 V2 2008.03.23 -
Rising 20.36.61.00 2008.03.23 -
Sophos 4.27.0 2008.03.23 Mal/Emogen-N
Sunbelt 3.0.978.0 2008.03.18 -
Symantec 10 2008.03.23 -
TheHacker 6.2.92.252 2008.03.22 -
VBA32 3.12.6.3 2008.03.21 -
VirusBuster 4.3.26:9 2008.03.22 -
Webwasher-Gateway 6.6.2 2008.03.23 Heuristic.Malware

上报了

BING126

McAfee  MISS

qigang

不是病毒。

傻猪猪米走鸡

等红伞用户上报的结果……

ARXIN

卡巴报，不是病毒，却是一堆强制安装的广告插件，包括迅雷。

303898443

卡巴报广告软件

sam.to

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aiw        檔案: C:\Documents and Settings\kato9096\桌面\fd.rar/捃濘睿銡擬け狟婥\121221221.tmp//PE_Patch.UPX//UPX
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aiw        檔案: C:\Documents and Settings\kato9096\桌面\fd.rar/捃濘睿銡擬け狟婥\WebProtect.dll//PE_Patch.UPX//UPX

无尽藏海

Filename        Result         1119578063.jpg         CLEAN


The file '1119578063.jpg' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.




  Filename        Result         121221221.tmp         MALWARE

The file '121221221.tmp' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) starting with the next update. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.



  Filename        Result         WebProtect.dll         MALWARE

The file 'WebProtect.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is an adware or spyware program. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[ 本帖最后由 无尽藏海 于 2008-3-24 17:29 编辑 ]