红伞误报收集站

显示全部楼层 · 发表于 2008-7-31 22:52:17

文件名:tenyQQ
是否上报：未上报

显示全部楼层 · 发表于 2008-8-6 13:34:10

TenyQQ 应该是 Extended Threat Categories里面的这个是不会移除的

显示全部楼层 · 发表于 2008-8-6 20:26:46

伞的误报果然名不虚传
文件名/软件名  HyperSnap.exe
误报名 TR/Onlinegames.3145728
附件有
是否上报：已上报
上报分析结果：
Thank you for your submission. Below you can see the current status of the uploaded files.

--------------------------------------------------------------------------------
A listing of files alongside their results can be found below:
File ID  Filename Size (Byte) Result
25081878  HprSnap6.exe  3 MB  FALSE POSITIVE

Please find a detailed report concerning each individual sample below:
Filename Result
HprSnap6.exe  FALSE POSITIVE
The file 'HprSnap6.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates. In case AntiVir can detect this file we will not change or remove our detection.

显示全部楼层 · 发表于 2008-8-8 10:37:59

我倒继续发
文件名/软件名  unhidden.reg
误报名忘了
附件有
是否上报：已上报
上报分析结果：
A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
25106987  unhidden.reg  1.19 KB  FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result
unhidden.reg  FALSE POSITIVE

The file 'unhidden.reg' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.0.5.228.

显示全部楼层 · 发表于 2008-8-8 12:11:04

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00188112.

A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
25106854  stormupd.dll  32 KB  FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result  stormupd.dll  FALSE POSITIVE

The file 'stormupd.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=188112

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... AhC951ZZDXdGwBz9fLL

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

显示全部楼层 · 发表于 2008-8-10 01:19:56

文件名/软件名 jmcatv_com_cn[1].htm
误报名 HTML/Downloader.Gen
附件有
是否上报：已上报
官方分析结果：The file 'jmcatv_com_cn[1].htm' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 451102995 于 2008-8-11 23:36 编辑 ]

显示全部楼层 · 发表于 2008-8-10 16:16:02

文件名/软件名:(http://notice.aceonline.com.cn/)
误报名:HTML/Infected.WebPage.Gen
附件: 无(登陆这个网址就知道了)
是否上报：未上报
ps:这是网络游戏<壮志凌云>登陆时出现的官方公告页面,怎么成病毒了,别的杀软都不报它的

显示全部楼层 · 发表于 2008-8-14 17:38:30

文件名:eShell1.fne
误报名： Is the TR/StartPage.6144.S Trojin
是否上报：已上报

上报分析结果：
Please find a detailed report concerning each individual sample below:

Filename Result
eShell1.fne FALSE POSITIVE

The file 'eShell1.fne' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates
确定文件‘eShell1.fne’是‘假阳性’。特别是这意味着这个文件不是恶意，而是一个假警报。侦查从我们的病毒定义文件(VDF)将被取消与其中一次下次更新。

显示全部楼层 · 发表于 2008-8-20 01:28:32

倒  这页我占了三个位置斑竹快来加分啊

文件名：迅雷5补丁
误报名：忘了
是否上报：已上报
上报分析结果：
Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00192791.

A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
25117358  ??5??.exe  676.31 KB  FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result
??5??.exe  FALSE POSITIVE

The file '??5??.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-8-21 13:04:08

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00193566.

A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
1298609  gho_run.exe  1.06 MB  FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result  gho_run.exe  FALSE POSITIVE

The file 'gho_run.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=193566

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... AhC951ZZDXdGwBz9fLL

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

[讨论] 红伞误报收集站

回复 111楼 byxiaochen 的帖子

误报