已上报McAfee 
刚才回复了
AVERT Labs - Beaverton
Current Scan Engine Version:5200.2160
Current DAT Version:5287.0000
Thank you for your submission.
Analysis ID: 4627449
File Name Findings Detection Type Extra
--------------------|------------------------------|----------------------------|------------|-----
2002.exe |new detection |downloader-ach |Trojan |yes
2008.exe |new detection |downloader-ach |Trojan |yes
setup_iesuper_1018.e|inconclusive | | |no
Attached is a file for extra detection, which will be included in a future DAT set. We
have detected a virus or trojan that can only be detected and removed with the
attached EXTRA.DAT and current scan engine. The EXTRA.DAT must be used with the
current scan engine, and we highly recommend you update to the most current DAT
release. If you are not seeing this with the product you are using, please speak with
technical support so they can help you determine the cause of this discrepancy.
inconclusive [setup_iesuper_1018.exe]
Upon analysis the file submitted does not appear to contain one of the 200,000 known
threats in the AutoImmune database. The file may contain a new threat, or no code
capable of being infected. Your submission is being forwarded to an Avert Labs
Researcher for further analysis. You will be contacted by AVERT through e-mail with
the results of that analysis.
new detection [2002.exe 2008.exe]
The file received contains a new virus or trojan. It is recommended that you update
your DAT and engine files and scan your computer again.
To find detailed information about viruses and other malware, please review AVERT抯
Virus Information Library:
http://vil.mcafeesecurity.com
In order to get the fastest possible response, you may wish to submit future
virus-samples to:
https://www.webimmune.net/default.asp
In most cases it can respond almost instantly with a solution. This may also be the
best option if you are having a problem with gateway scanners stripping your sample
submission.
If you believe your computer is infected, but are unsure which files should be
submitted to AVERT for review, please visit:
http://vil.mcafeesecurity.com/vil/submit-sample.aspx
For other virus-related information, please review the AVERT homepage at:
http://www.mcafee.com/us/threat_center/default.asp
Support ?nbsp;
Virus Research accepts file-samples for analysis and possible inclusion into AV
signature DAT sets. We are also prepared to answer general virus questions. All
product-related questions and comments can be addressed through technical support and
customer service, including:
* Product installation and update questions
* Product usage questions
* Specific operating system/version questions
* Assistance with detection and cleaning or removal of viruses or trojans
Use the following link to update your DAT and scan engine to the most current version:
http://www.mcafee.com/apps/downloads/security_updates/dat.asp
Use the following links to reach online technical support for McAfee products -
Corporate Customers:
http://www.mcafeesecurity.com/us/support/
Single User/Retail Customers:
http://www.mcafeehelp.com
Note ?nbsp;
Due to the prevalence of network gateway AV products, it is important that all
submissions be zipped and the zip file password-protected (password - infected). Some
products will reject an email that contains a virus that is not sent in this way. In
addition, often we receive a file that appears not to have been infected, to find
later that the file was infected when it left the sender, and was cleaned somewhere
along the line.
Regards,
McAfee AVERT tm
A division of McAfee, Inc
[ 本帖最后由 BING126 于 2008-5-3 21:39 编辑 ] |
楼主: The EQs
[复制链接]
发表于 2008-5-3 17:48:24
