疑为红伞误报系统文件，各位帮看下

显示全部楼层 · 发表于 2008-4-17 20:35:32

隔离后系统执行保护（DEP)提示系统关键文件丢失。已以误报上报红伞等待解决

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.4.17.0	2008.04.17	-
AntiVir	7.6.0.85	2008.04.17	BDS/Hupigon.bpzp
Authentium	4.93.8	2008.04.16	-
Avast	4.8.1169.0	2008.04.16	-
AVG	7.5.0.516	2008.04.17	BackDoor.Hupigon4.GXR
BitDefender	7.2	2008.04.17	-
CAT-QuickHeal	9.50	2008.04.16	-
ClamAV	0.92.1	2008.04.17	-
DrWeb	4.44.0.09170	2008.04.17	-
eSafe	7.0.15.0	2008.04.16	-
eTrust-Vet	31.3.5706	2008.04.17	-
Ewido	4.0	2008.04.17	-
F-Prot	4.4.2.54	2008.04.16	-
F-Secure	6.70.13260.0	2008.04.17	-
FileAdvisor	1	2008.04.17	-
Fortinet	3.14.0.0	2008.04.17	-
Ikarus	T3.1.1.26	2008.04.17	Backdoor.Win32.Hupigon.bpzp
Kaspersky	7.0.0.125	2008.04.17	-
McAfee	5275	2008.04.16	-
Microsoft	1.3408	2008.04.17	-
NOD32v2	3033	2008.04.17	-
Norman	5.80.02	2008.04.16	-
Panda	9.0.0.4	2008.04.17	-
Prevx1	V2	2008.04.17	-
Rising	20.40.32.00	2008.04.17	-
Sophos	4.28.0	2008.04.17	Sus/ComPack-C
Sunbelt	3.0.1056.0	2008.04.17	VIPRE.Suspicious
Symantec	10	2008.04.17	-
TheHacker	6.2.92.281	2008.04.17	-
VBA32	3.12.6.4	2008.04.16	-
VirusBuster	4.3.26:9	2008.04.16	-
Webwasher-Gateway	6.6.2	2008.04.17	Trojan.Backdoor.Hupigon.bpzp

[ 本帖最后由 wwtd 于 2008-4-17 20:42 编辑 ]

显示全部楼层 · 发表于 2008-4-17 20:37:03

小红伞又误报了！

显示全部楼层 · 发表于 2008-4-17 22:12:04

红伞的回复是？

显示全部楼层 · 发表于 2008-4-18 00:31:48

The file 'winntbbu.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Our analysts named the threat BDS/Hupigon.bpzp. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.
看这回复我就吐血了，到底要不要移除

显示全部楼层 · 发表于 2008-4-18 08:58:33

竟然有这种回复！不是自相矛盾吗？

显示全部楼层 · 发表于 2008-4-18 10:54:20

不一定是误报哦
可能是后门

AVG也杀了

显示全部楼层 · 发表于 2008-4-18 17:59:51

原帖由 mofunzone 于 2008-4-18 00:31 发表
The file 'winntbbu.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Our analysts named the threat BDS/Hupigon.bpzp. The term ...

下午回复，还是误报

Please find a detailed report concerning each individual sample below:

Filename	Result
winntbbu.dll	FALSE POSITIVE

The file 'winntbbu.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-4-18 18:25:25

晕~~~~~我已经杀了！！！！！！！！！不过还没发现对系统有什么影响
网上查了下！好像是番茄花园的有关的东西

[ 本帖最后由 hanxiao1027 于 2008-4-18 18:28 编辑 ]

显示全部楼层 · 发表于 2008-4-18 19:28:27

Ikarus报鴿子

显示全部楼层 · 发表于 2008-5-20 08:07:59

原帖由 bianwenlong 于 2008-4-18 10:54 发表
不一定是误报哦
可能是后门
AVG也杀了

明摆的误报，两者误报都是很严重的……

[误报文件] 疑为红伞误报系统文件，各位帮看下

本帖子中包含更多资源

回复 4楼 mofunzone 的帖子