红伞误报收集站

webweb

1.文件名datafeeder-49
2.误报名： 这明显是一个木马 居然说是clean！
3.上传附件 大家一起来看看吧
4.更多就不多说了

小乔美子

超级误报

CAD 2004

还报了HP笔记本的一个原机文件 超级误报（HP的文件没有发上来 因为本本是我朋友的）

[ 本帖最后由 小乔美子 于 2009-5-29 02:33 编辑 ]

zhl7500

昨晚红伞升级后误报CAD4002四个文件，这里只收集到三张图

yxc312

原来有这么多兄弟碰到AutoCAD2004被报的，为此，我换回了V8。

V9误报AutoCAD2004，还造成AutoCAD2006无响应。

多拉A梦2

误报程序名：比特糈灵3.5.0.256简体中文安装程序
是否上报：未上报。

alexme

我做网站的时候一个ASP程序被报，谁给上报一下？

infohy

误报文件名：winboidun.dll，是SYSTEM32文件夹下的文件

操作系统：深度完美精简SP3

红伞版本：V9 F版

误报描述：当我从‘开始’——>‘我的电脑’，红伞监控立马报警，而且系统假死，只能注销重新登录后才有办法解决：关掉红伞监控，排除之。

是否上报：已上报。

附件：无。

处理结果：
Please find a detailed report concerning each individual sample below:

Filename	Result
winboidun.dll	MALWARE

The file 'winboidun.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/AdClicker.N.5. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.04.34.

这是不是说明：这个文件是Microsoft用来刺探用户隐私的众多后门程序中的一个？？？

[ 本帖最后由 infohy 于 2009-6-4 23:06 编辑 ]

sd4264061

文件名/软件名:  killbox.exe
误报名             :  FALSE POSITIVE
是否上报：        已上报
上报分析结果:
A listing of files alongside their results can be found below:

File ID ?Filename Size (Byte) Result
25239714  KillBox.exe  334.5 KB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

?Filename Result
KillBox.exe  FALSE POSITIVE

The file 'KillBox.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

sd4264061

文件名/软件名:  SREngLogA 1.3.exe  
误报名             :  FALSE POSITIVE
是否上报：        已上报
上报分析结果:
A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
3796690  SREngLogA 1.3.exe  490.98 KB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

Filename Result
SREngLogA 1.3.exe  FALSE POSITIVE

The file 'SREngLogA 1.3.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

sd4264061

文件名/软件名:  磁盘碎片整理.exe  
误报名             :  FALSE POSITIVE
是否上报：        已上报
上报分析结果:
A listing of files alongside their results can be found below:

File ID  Filename Size (Byte) Result
25077271  磁盘碎片整理.exe  785.75 KB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

Filename Result
磁盘碎片整理.exe  FALSE POSITIVE

The file '磁盘碎片整理.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates. In case AntiVir can detect this file we will not change or remove our detection.