红伞启发报sreng日志文件

显示全部楼层 · 发表于 2008-6-21 20:24:10

一个sreng日志文件，只有红伞报启发

谁能告诉我，这个日志哪里惹到红伞了

VirSCAN.org Scanned Report :
Scanned time : 2008/06/21 20:13:54 (CST)
Scanner results: 3%的杀软(1/36)报告发现病毒
File Name    : SREngLOG.rar
File Size    : 7692 byte
File Type    : RAR archive data, v1d, os
MD5          : f51816bbd646ea2f2cfc844351cdf3ed
SHA1          : ec33c441ea277e2f551e4a3da47a5d37542042ab
Online report  : http://virscan.org/report/d485b8fb9cab5a411daec2367d53b960.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.18       2008.06.20       2008-06-20  4.65 -
安博士V3    2008.06.21.00 2008.06.21       2008-06-21  2.05 -
AntiVir       7.8.0.59       7.0.4.232       2008-06-20  9.43 HEUR/HTML.Malware
Arcavir       1.0.4          200806202026    2008-06-20  4.92 -
AVAST!       1.0.8          080620-0       2008-06-20  10.85  -
AVG          7.5.51.442    270.4.1/1512    2008-06-21  6.74 -
BitDefender 7.60825.1262333 7.19633          2008-06-21  16.15  -
CA (VET)    9.0.0.143    31.6.5892       2008-06-21  1.08 -
ClamAV       0.93          7526             2008-06-21  0.02 -
Comodo       2.11          2.0.0.562       2008-06-21  1.43 -
CP Secure    1.1.0.715    2008.06.21       2008-06-21  21.44  -
Dr.Web       4.44.0.9170    2008.06.21       2008-06-21  13.28  -
ewido       4.0.0.2       2008.06.21       2008-06-21  2.88 -
F-Prot       4.4.1.52       20080620       2008-06-20  3.06 -
F-Secure    5.51.6100    2008.06.20.02    2008-06-20  14.98  -
飞塔          2.81-3.11    9.224          2008-06-21  1.75 -
ViRobot       20080621       2008.06.21       2008-06-21  0.91 -
Ikarus       T3.1.01.26    2008.06.21.70954  2008-06-21  7.09 -
江民杀毒    11.0.706       2008.06.17       2008-06-17  1.17 -
卡巴斯基    5.5.10       2008.06.21       2008-06-21  0.03 -
金山毒霸    2008.1.14.15 2008.6.21.15    2008-06-21  1.07 -
迈克菲       5.2.00       5322             2008-06-20  3.76 -
Microsoft    1.3604       2008.06.21       2008-06-21  5.38 -
mks_vir       2.01          2008.06.20       2008-06-20  6.30 -
Norman       5.92.08       5.92.00          2008-06-20  13.54  -
熊猫卫士    9.04.03.0001 2008.06.18       2008-06-18  2.33 -
趋势科技    8.700-1004    5.356.05       2008-06-21  0.04 -
Quick Heal    9.50          2008.06.20       2008-06-20  1.77 -
瑞星          20.0          20.49.52.00    2008-06-21  0.87 -
Sophos       2.74.1       4.30             2008-06-21  13.41  -
Sunbelt       3.0.1153.1    2093             2008-06-13  1.01 -
赛门铁克    1.3.0.24       20080620.003    2008-06-20  0.24 -
nProtect    2008-06-19.00 1549503          2008-06-19  4.79 -
The Hacker    6.2.92       v00357          2008-06-20  0.98 -
VBA32       3.12.6.7       20080618.2258    2008-06-18  2.32 -
VirusBuster 4.5.11.10    10.79.1/594378 2008-06-19  1.32 -

显示全部楼层 · 发表于 2008-6-21 20:25:01

只能说明红伞。。。。。。。。。。。。。。。。。。。。。

显示全部楼层 · 发表于 2008-6-21 20:47:06

，，e~~~

的确很无语，上报看看。

显示全部楼层 · 发表于 2008-6-21 20:53:07

红伞最近更新日志中确实显示对HEUR/HTML.Malware进行了更新，也修正了误报，不过看来还得继续修正此启发式侦测的误报

We would like to announce you that a new Avira engine update took place.

This is the version number of the new engine:
AV7 7.8.0.59 / AV8 8.1.0.59

The following changes were done:

- Updated: Detection of polymorphic viruses
  W32/Sality

- Updated: Exploit detection
  EXP/Flash.Gen

- Updated: Heuristic and generic detections
  ADSPY/AdSpy.Gen
  DR/Delphi.Gen
  DR/Dldr.DnsChanger.Gen
  DR/Zlob.Gen
  TR/ATRAPS.Gen
  TR/Crypt.CFI.Gen
  TR/Crypt.ULPM.Gen
  TR/Crypt.XDR.Gen
  TR/Crypt.XPACK.Gen
  TR/Dldr.Delphi.Gen
  TR/Dldr.Zlob.Gen
  TR/Downloader.Gen
  TR/Dropper.Gen
  TR/Hijacker.Gen
  TR/PWS.Sinowal.Gen
  TR/Rootkit.Gen
  TR/Spy.Banker.Gen
  TR/Spy.Gen
  TR/Vundo.Gen
  WORM/Zhelatin.Gen
  HEUR/Malware
  HEUR/HTML.Malware
  HTML/Rce.Gen

- Fixed: False positives
  HEUR/Malware
  HTML/Infected.WebPage.Gen
  HTML/ADODB.Exploit.Gen
  HTML/Rce.Gen
  HEUR/HTML.Malware
  HEUR/ELF.Malformed

Sincerely,
Your Avira team

显示全部楼层 · 发表于 2008-6-21 21:14:03

应该是日志文件里有某个网址吧

显示全部楼层 · 发表于 2008-6-21 21:23:46

真是绝了，独门秘招

显示全部楼层 · 发表于 2008-6-21 21:36:59

HEUR/HTML.Malware
唉，红伞报网页已经够乱了
记得前边有一帖HEUR/HTML.Malware报了个乱码的html
赶快移除算了

显示全部楼层 · 发表于 2008-6-21 21:47:14

这个有些强大...

显示全部楼层 · 发表于 2008-6-21 23:30:53

红伞!只有想不到,没有扫不到!

PS:在线扫描用的是命令行版,和实际结果会有些不同

显示全部楼层 · 发表于 2008-6-21 23:35:34

更无语的是

你上传这个干什么...

[其他相关] 红伞启发报sreng日志文件

本帖子中包含更多资源