误报?

显示全部楼层 · 发表于 2008-6-29 11:35:40

k8 2009报后门
SWF Decompiler

显示全部楼层 · 发表于 2008-6-29 11:38:22

Start of the scan: Sunday,29 June 2008  11:38

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\SWFDecompiler'
C:\Documents and Settings\kato9096\桌面\SWFDecompiler\SWFDecompiler.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Ciadoor.123.BT Backdoor server programs
   [NOTE]    The file was deleted!

End of the scan: Sunday,29 June 2008  11:38
Used time: 00:07 min

The scan has been done completely.

   1 Scanning directories
   1 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

The file 'SWFDecompiler.exe3' has been determined to be 'UNDER ANALYSIS'.

[ 本帖最后由 kato9096 于 2008-6-29 11:42 编辑 ]

显示全部楼层 · 发表于 2008-6-29 11:38:55

已刪除: 特洛伊木馬程式 Backdoor.Win32.Ciadoor.123.bt 檔案: C:\Documents and Settings\kato9096\桌面\SWFDecompiler\SWFDecompiler.exe//Armadillo

上报卡巴,看看是不是誤报.

[ 本帖最后由 kato9096 于 2008-6-29 11:44 编辑 ]

显示全部楼层 · 发表于 2008-6-29 11:43:39

4月时vt上的記錄是4家报,現在有15家报
反病毒引擎版本最後更新掃瞄結果
AhnLab-V3 2008.6.27.1 2008.06.27 -
AntiVir 7.8.0.59 2008.06.28 BDS/Ciadoor.123.BT
Authentium 5.1.0.4 2008.06.29 W32/Backdoor2.ASPL
Avast 4.8.1195.0 2008.06.28 -
AVG 7.5.0.516 2008.06.29 Generic_c.KNY
BitDefender 7.2 2008.06.29 -
CAT-QuickHeal 9.50 2008.06.28 -
ClamAV 0.93.1 2008.06.28 Trojan.Ciadoor-737
DrWeb 4.44.0.09170 2008.06.28 -
eSafe 7.0.17.0 2008.06.26 Win32.Ciadoor.123.bt
eTrust-Vet 31.6.5911 2008.06.27 -
Ewido 4.0 2008.06.27 Backdoor.Ciadoor.123.bt
F-Prot 4.4.4.56 2008.06.29 W32/Backdoor2.ASPL
Fortinet 3.14.0.0 2008.06.28 W32/Ciadoor_123.BT!tr.bdr
GData 2.0.7306.1023 2008.06.29 Backdoor.Win32.Ciadoor.123.bt
Ikarus T3.1.1.26.0 2008.06.29 Backdoor.Win32.Ciadoor.123.bt
Kaspersky 7.0.0.125 2008.06.29 Backdoor.Win32.Ciadoor.123.bt
McAfee 5327 2008.06.27 -
Microsoft 1.3704 2008.06.29 -
NOD32v2 3225 2008.06.29 -
Norman 5.80.02 2008.06.27 Ciadoor.FRY
Panda 9.0.0.4 2008.06.28 -
Prevx1 V2 2008.06.29 -
Rising 20.50.52.00 2008.06.28 -
Sophos 4.30.0 2008.06.29 -
Sunbelt 3.0.1176.1 2008.06.26 -
Symantec 10 2008.06.29 -
TheHacker 6.2.96.364 2008.06.28 Backdoor/Ciadoor.123.bt
TrendMicro 8.700.0.1004 2008.06.27 -
VBA32 3.12.6.8 2008.06.28 Backdoor.Win32.Ciadoor.123.bt
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.28 Trojan.Backdoor.Ciadoor.123.BT

显示全部楼层 · 发表于 2008-6-29 11:44:13

又换样本。。。

显示全部楼层 · 发表于 2008-6-29 11:45:54

很多同名字,所以有理由相信是集体误报

显示全部楼层 · 发表于 2008-6-29 16:05:21

Hello.

Sorry, it was a false detection. It will be fixed in the next updates.
Thank you for your help.

Please quote all when answering.

-----------------
Regards, Evgeny Aseev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-6-29 16:07:46

kav 0

显示全部楼层 · 发表于 2008-6-29 21:17:31

非常抱歉的看到这个消息。

[误报文件] 误报?

本帖子中包含更多资源

回复 5楼 Joker 的帖子

回复 7楼 kato9096 的帖子