7z.sfx应该是小红伞误报吧[居然报灰鸽子]

显示全部楼层 · 发表于 2008-7-15 19:52:05

正在进行例行病毒扫描,被小红伞的结果雷死了.

The file 'C:\Program Files\7-Zip\7z.sfx'
contained a virus or unwanted program 'TR/Hupigon.BZGF' [trojan]
Action(s) taken:
A backup was created as "48a6deeb.qua" ( QUARANTINE )

然后上报红伞大本营,得到的自动回复是:

The file '7z.sfx' has been determined to be 'MALWARE'. Detection is added to our virus definition file (VDF) starting with version 7.00.05.102. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: TR/Hupigon.BZGF.

这个应该是误报吧.

放到VirusTotal扫描一下.第一次就Norman报了,小红伞没报.
第二次:

反病毒引擎版本最后更新扫描结果
AhnLab-V3 2008.7.11.0 2008.07.11 -
AntiVir 7.8.0.64 2008.07.11 TR/Hupigon.BZGF
Authentium 5.1.0.4 2008.07.11 -
Avast 4.8.1195.0 2008.07.12 -
AVG 7.5.0.516 2008.07.12 -
BitDefender 7.2 2008.07.12 -
CAT-QuickHeal 9.50 2008.07.11 -
ClamAV 0.93.1 2008.07.11 -
DrWeb 4.44.0.09170 2008.07.12 -
eSafe 7.0.17.0 2008.07.10 -
eTrust-Vet 31.6.5949 2008.07.12 -
Ewido 4.0 2008.07.12 -
F-Prot 4.4.4.56 2008.07.11 -
F-Secure 7.60.13501.0 2008.07.12 -
Fortinet 3.14.0.0 2008.07.12 -
GData 2.0.7306.1023 2008.07.12 -
Ikarus T3.1.1.26.0 2008.07.12 -
Kaspersky 7.0.0.125 2008.07.12 -
McAfee 5337 2008.07.11 -
Microsoft 1.3704 2008.07.12 -
NOD32v2 3263 2008.07.11 -
Norman 5.80.02 2008.07.11 W32/Hupigon.BZGF
Panda 9.0.0.4 2008.07.12 -
Prevx1 V2 2008.07.12 -
Rising 20.52.52.00 2008.07.12 -
Sophos 4.31.0 2008.07.12 -
Sunbelt 3.1.1536.1 2008.07.12 -
Symantec 10 2008.07.12 -
TheHacker 6.2.96.376 2008.07.10 -
TrendMicro 8.700.0.1004 2008.07.11 -
VBA32 3.12.6.9 2008.07.12 -
VirusBuster 4.5.11.0 2008.07.12 -
Webwasher-Gateway 6.6.2 2008.07.11 Trojan.Hupigon.BZGF

晕.不是吧.灰鸽子...7-zip我是从官方网站下载的.

下面附上文件.

显示全部楼层 · 发表于 2008-7-15 20:02:18

上报卡巴以后，确认不是病毒

显示全部楼层 · 发表于 2008-7-15 20:35:16

刚收到红伞的回复.
内容如下.[他们坚持这个是危险程序]

A listing of files alongside their results can be found below:

File ID ?Filename Size (Byte) Result
25072379 7z.sfx 130 KB DAMAGED FILE (MALWARE)

Please find a detailed report concerning each individual sample below:

?Filename Result
7z.sfx DAMAGED FILE (MALWARE)

The file '7z.sfx' has been determined to be 'DAMAGED FILE (MALWARE)'. In particular this means that this file is damaged and not working properly. Nevertheless we were able to determine that it contains malicious code fragments. Our analysts named the threat TR/Hupigon.BZGF. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.05.102. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: TR/Hupigon.BZGF.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=172678

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... HND62V7YN3vmT7IsUtq

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards
Avira Virus Lab

显示全部楼层 · 发表于 2008-7-15 20:50:19

红伞可能和Winzip或者Winrar是合作伙伴关系吧

说着玩

显示全部楼层 · 发表于 2008-7-16 10:56:32

移动至样本区谢谢合作~

显示全部楼层 · 发表于 2008-7-16 11:17:10

那個官方??
我也從官方下載
457 458beta 也沒報

显示全部楼层 · 发表于 2008-7-16 12:00:47

http://www.7-zip.org/zh-cn/
这里下载的.

显示全部楼层 · 发表于 2008-7-16 14:33:45

The file '7z.sfx' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm.

显示全部楼层 · 发表于 2008-7-16 14:51:53

谢谢.
信中的地址没仔细看.

[误报文件] 7z.sfx应该是小红伞误报吧[居然报灰鸽子]

本帖子中包含更多资源

本帖子中包含更多资源

回复 6楼 Kitman 的帖子

回复 7楼 Tynox 的帖子

回复 8楼 Kitman 的帖子