请问一下 这个是病毒还是误报？？？

Palkia

我觉得不算病毒

wangjay1980

是个游戏补丁？
Bant Engineering NetWork Planning   (events: 16)
2008-11-11 JAY22:36:08 Placed in group Low Restricted  
2008-11-11 JAY22:36:08 Process start C:\Documents and Settings\Owner\桌面\Project1.exe  
2008-11-11 JAY22:36:20 Process exit C:\Documents and Settings\Owner\桌面\Project1.exe  
2008-11-11 JAY22:42:17 Process start C:\Documents and Settings\Owner\桌面\Project1.exe  
2008-11-11 JAY22:42:33 Hook installation C:\Documents and Settings\Owner\桌面\Project2.dll Allowed: KLPrivileges/KLPermissionAppAccess/KLPermissionProcEmbed/KLSetHook
2008-11-11 JAY22:43:12 Process exit c:\windows\system32\ctfmon.exe Allowed: KLPrivileges/KLPermissionAppAccess/KLPermissionProcManage/KLStopProc
2008-11-11 JAY22:43:21 Process exit C:\Documents and Settings\Owner\桌面\Project1.exe  

tjjl

原帖由 wangjay1980 于 2008-11-11 22:45 发表
是个游戏补丁？
Bant Engineering NetWork Planning   (events: 16)
2008-11-11 JAY22:36:08 Placed in group Low Restricted  
2008-11-11 JAY22:36:08 Process start C:\Documents and Settings\Owner\桌面\Pr ...

恩是


是病毒吗？？

wangjay1980

没有发现恶意行为，而且这样的补丁通常都会安装HOOK，所以，应该是干净的。

当然，你最好是上报你用的杀软，这样最保险。

无尽藏海

原帖由 wangjay1980 于 2008-11-11 22:45 发表
是个游戏补丁？
Bant Engineering NetWork Planning   (events: 16)
2008-11-11 JAY22:36:08 Placed in group Low Restricted  
2008-11-11 JAY22:36:08 Process start C:\Documents and Settings\Owner\桌面\Pr ...

疑似误报，扔给伞了

328397663

卡巴无视..红伞误报

无尽藏海

Filename         Result          Project2.dll          CLEAN

The file 'Project2.dll' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result          Project1.exe          FALSE POSITIVE

The file 'Project1.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.