红伞误报收集站

foxkissme

文件名/软件名 MemDef.exe（超级兔子的内存整理组件）
误报名 Trojan.Hupigeon.XXXX
是否上报：已上报
上报分析结果：
Filename Result
MemDef.exe  FALSE POSITIVE

The file 'MemDef.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.0.5.80.

0312072650

文件名/软件名：CaiHong.dll/彩虹QQ2.4版组件
误报名：HEUR/Malware
是否上报：已上报
上报分析结果
A listing of files alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25071003	CaiHong.dll	924 KB	FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename

Result

CaiHong.dll

FALSE POSITIVE

The file 'CaiHong.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/samples/details.php?uniqueid=1pnOPOsMGDY99NUCFSnqMJPURU0Q3Cck&incidentid=171975

An overview of all your submissions can be found here:
http://analysis.avira.com/samples/details.php?uniqueid=1pnOPOsMGDY99NUCFSnqMJPURU0Q3Cck

[ 本帖最后由 0312072650 于 2008-7-12 10:09 编辑 ]

leizhangcn

文件名/软件名：Super Video to Audio Converter.exe
误报名：PCK/Packman
下载地址/链接地址 ：http://www.greendown.cn/soft/380.html
附件：
是否上报：已上报
上报分析结果：
We received the following archive files:

File ID	Filename	Size (Byte)	Result
25070943	Super Video to Au...er.zip	481.12 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25070944	Super Video to Au...er.exe	485.68 KB	MALWARE

Please find a detailed report concerning each individual sample below:

Filename	Result
Super Video to Au...er.exe	MALWARE

The file 'Super Video to Audio Converter.exe' has been determined to be 'MALWARE'.
Our analysts named the threat PCK/Packman. File has been compressed with an unusual runtime compression tool. Please make sure that this file comes from a trustworthy source.This malware is detected by a special detection routine from the engine module.


Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

[ 本帖最后由 leizhangcn 于 2008-7-11 10:58 编辑 ]

duoduohao

把我的穿越火线主程序当病毒隔离起来了.

文件名:count02[1].js/count02[1].VIR
误报名:HEUR/HTML.Malware
是不上报:未上报
下载地址/链接地址:http://www.duowan.com/     http://wow.duowan.com/

zhangxueyou

文件名/软件名：autorun病毒防御者
误报名：ADSPY/Rensoft.C
下载地址/链接地址 ：http://www.rensoft.com.cn/releases/1.html
是否上报：否


virustotal扫描结果
文件 AutoGuarder2.3.1.125.rar 接收于 2008.07.16 11:40:42 (CET)
当前状态: 正在读取 ... 队列中 等待中 扫描中 完成 未发现 停止

结果: 7/33 (21.22%)

正在读取服务器信息中...
您的文件所排队列位置: ___.
预计开始时间为 ___ 和 ___
之间.
扫描完成前请勿关闭窗口.
目前针对您的文件所进行的扫描进程已停止, 我们将会在稍后恢复.
如果您的等候时间超过 5 分钟, 请重新发送文件.
您的文件目前正在被 VirusTotal 扫描中,
结果将会稍后完成时生成.

格式化文本
打印结果

您的文件已过期或不存在.
目前服务已停止, 您的文件将会稍后的未知时间内进行扫描 (位置:
). 您可以继续等待回应 (自动读取) 或者在下面的表单内输入您的电子邮件地址, 并按下 "获取", 当扫描完成时, 系统会自动给您发送电子邮件通知.  

Email:

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.7.16.0	2008.07.16	-
AntiVir	7.8.0.68	2008.07.16	ADSPY/Rensoft.C
Authentium	5.1.0.4	2008.07.15	-
Avast	4.8.1195.0	2008.07.15	-
AVG	7.5.0.516	2008.07.16	-
BitDefender	7.2	2008.07.16	-
CAT-QuickHeal	9.50	2008.07.15	-
ClamAV	0.93.1	2008.07.16	-
DrWeb	4.44.0.09170	2008.07.16	-
eSafe	7.0.17.0	2008.07.15	Suspicious File
eTrust-Vet	31.6.5959	2008.07.16	-
Ewido	4.0	2008.07.15	-
F-Prot	4.4.4.56	2008.07.15	-
F-Secure	7.60.13501.0	2008.07.16	-
Fortinet	3.14.0.0	2008.07.16	-
GData	2.0.7306.1023	2008.07.16	-
Ikarus	T3.1.1.26.0	2008.07.16	AdWare.Rensoft.C
Kaspersky	7.0.0.125	2008.07.16	-
McAfee	5339	2008.07.15	-
Microsoft	1.3704	2008.07.16	-
NOD32v2	3271	2008.07.16	-
Norman	5.80.02	2008.07.15	-
Panda	9.0.0.4	2008.07.15	-
Prevx1	V2	2008.07.16	Suspicious
Rising	20.53.22.00	2008.07.16	-
Sophos	4.31.0	2008.07.16	Mal/GamePSW-C
Sunbelt	3.1.1536.1	2008.07.15	Trojan.RestrictRun.A
Symantec	10	2008.07.16	-
TheHacker	6.2.96.381	2008.07.16	-
TrendMicro	8.700.0.1004	2008.07.16	-
VBA32	3.12.8.0	2008.07.15	-
VirusBuster	4.5.11.0	2008.07.15	-
Webwasher-Gateway	6.6.2	2008.07.16	Ad-Spyware.Rensoft.C

附加信息

File size: 1174781 bytes

MD5...: 28b1ba4219a22be6705bf648c5d6e600

SHA1..: bcacb015e2e4a448faaa19a12d28dde1cba0f741

SHA256: 0c23a0dab36480dc691c96056959b7fd3bf6e97eecfc43dc8863feee3579bb1c

SHA512: c0d4c1bfefd05a89a3101fbab1a12fbc11d4f3c04614a9118daeb5e1f511221b 03440a0d8eb9c423339fae7d697d0bc3c016ec9060dff35336ba9c2057ad53a6

PEiD..: -

PEInfo: -

Prevx info: http://info.prevx.com/aboutprogr ... 197F9A6C900D23AA7B3

packers (Kaspersky): PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX, PE_Patch.UPX, UPX

小小鸟x

文件名/软件名：KeyGen 4 Kafan Special Ver
误报名：未知的病毒或者程序
下载地址/链接地址
附件
是否上报：未上报
上报分析结果

小小鸟x

文件名/软件名：注册机
误报名：未知的病毒或者程序
下载地址/链接地址
附件
是否上报：未上报
上报分析结果
描述：此文件为一款智能手机软件的注册机，应该是无害的

小小鸟x

有一个1M多的文件发不上来，是一个QQ游戏的程序

[ 本帖最后由 小小鸟x 于 2008-7-17 04:38 编辑 ]

taisanh

貌似金山词霸的升级文件 应该是误报 请版主帮忙上报