红伞误报收集站

sam.to

Filename         Result
iframe_07web_top2.htm          FALSE POSITIVE

The file 'iframe_07web_top2.htm' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.0.4.231.

sam.to

Filename         Result
iframe_08end_right.shtml          FALSE POSITIVE

The file 'iframe_08end_right.shtml' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.0.4.231.

sam.to

原帖由 hellobaby 于 2008-6-25 20:50 发表
295218295219295220295221

Filename         Result
Update.exe          MALWARE

The file 'Update.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/RestrictRun.A. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243.
Filename         Result
arvmon.exe          MALWARE

The file 'arvmon.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/Rensoft.C. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243.
Filename         Result
AutoGuarder.exe          MALWARE

The file 'AutoGuarder.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/Rensoft.B. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243.
Filename         Result
LiveUpdate.exe          UNDER ANALYSIS

The file 'LiveUpdate.exe' has been determined to be 'UNDER ANALYSIS'.
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

无尽藏海

File ID         Filename        Size (Byte)        Result
25055386         arvmon.exe         252 KB         MALWARE
25055383         AutoGuarder.exe         429.5 KB         MALWARE
25057359         LiveUpdate.exe         328 KB         FALSE POSITIVE
25055384         Update.exe         86 KB         MALWARE





The file 'arvmon.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/Rensoft.C. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243


The file 'AutoGuarder.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/Rensoft.B. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243.  


The file 'LiveUpdate.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.  


The file 'Update.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/RestrictRun.A. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.243.

emutony

文件名/软件名 xPad.exe
误报名 HEUR/Malware
是否上报：已上报
上报分析结果
Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00165867.


A listing of files alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25055140	xPad.exe	22.5 KB	FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename

Result

xPad.exe

FALSE POSITIVE

The file 'xPad.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/samples/details.php?uniqueid=KLUwZAY3UpszHAhC951ZZDXdGwBz9fLL&incidentid=165867

An overview of all your submissions can be found here:
http://analysis.avira.com/samples/details.php?uniqueid=KLUwZAY3UpszHAhC951ZZDXdGwBz9fLL

无尽藏海

The file 'ZavS.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates. In case AntiVir can detect this file we will not change or remove our detection.

geforce

这个也是绝对的误报，不过红伞倔强的性格，不知道是否会给面子，纠正错误。

will

这个红伞报的是Extended Threat Categories(扩展威胁类别)里的
你可以在Export Mode中取消Securiy Privacy Risk(SPR)类别   红伞就不会报的
一般红伞官方是不是去除Extended Threat Categories里的病毒码的

kuontherun

44楼是我在网页上报的结果，以下为红伞发来邮件的检测结果，已更改为误报。呵呵~

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00166117.



A listing of files alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
3731952  WINIO.SYS  10.93 KB  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

燜ilename Result
WINIO.SYS  FALSE POSITIVE

The file 'WINIO.SYS' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

yuuto

文件名/软件名:  彩虹QQ显ip的CaiHong.dll
误报名             :  HEUR/Malware
下载地址/链接地址: http://download.caihongqq.com/CaiHong_Setup.exe 2.3修正版
是否上报：        已上报
上报分析结果:
Thank you for your submission. Below you can see the current status of the uploaded files.


We received the following archive files:

File ID	Filename	Size (Byte)	Result
25064363	CaiHong.rar	185.28 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25064364	CaiHong.dll	616 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename	Result
CaiHong.dll	UNDER ANALYSIS

The file 'CaiHong.dll' has been determined to be 'UNDER ANALYSIS'.