误报

Joker

伞啊。。

有空的上报下。。

a-squared	4.0.0.28	20081222063103	2008-12-22	Trojan-Spy.Win32.Banker.gxl!IK	3.674
AntiVir	7.9.0.45	7.1.1.17	2008-12-22	TR/Banker.Banker.ttb	1.676
Arcavir	1.0.5	200812131407	2008-12-13	-	1.256
Authentium	5.1.1	200812220741	2008-12-22	-	1.275
AVAST!	3.0.1	081221-0	2008-12-21	Win32:Trojan-gen {Other}	0.022
AVG	7.5.52.442	270.9.19/1860	2008-12-21	Generic11.INI	1.917
BitDefender	7.81008.2380878	7.22701	2008-12-22	-	2.396
CA (VET)	9.0.0.143	31.6.6271	2008-12-20	-	5.940
ClamAV	0.94.1	8791	2008-12-22	-	0.101
Comodo	3.0	793	2008-12-21	-	0.868
CP Secure	1.1.0.715	2008.12.22	2008-12-22	Troj.Banker.W32.Banker.ttb	6.350
Dr.Web	4.44.0.9170	2008.12.22	2008-12-22	Trojan.PWS.Banker.26335	3.826
ewido	4.0.0.2	2008.12.22	2008-12-22	-	5.644
F-Prot	4.4.4.56	20081222	2008-12-22	-	1.226
F-Secure	5.51.6100	2008.12.22.04	2008-12-22	-	4.155
GData	19.2038/19.153	20081222	2008-12-22	Win32:Trojan-gen {Other} [Engine:B]	2.970
Ikarus	T3.1.01.45	2008.12.22.72044	2008-12-22	Trojan-Spy.Win32.Banker.gxl	3.686
Microsoft	1.4205	2008.12.22	2008-12-22	-	4.739
mks_vir	2.01	2008.12.22	2008-12-22	-	2.701
Norman	5.93.01	5.93.00	2008-12-19	W32/Bancos.ACBI	5.746
nProtect	20081215.03	2773539	2008-12-15	Trojan-Spy/W32.Banker.478208.B	3.571
Quick Heal	10.00	2008.12.22	2008-12-22	-	0.950
Sophos	2.82.1	4.37	2008-12-22	-	2.345
Sunbelt	4754	4754	2008-12-10	Trojan-Banker.Win32.Banker.ttb	0.484
The Hacker	6.3.1.2	v00195	2008-12-20	Trojan/Banker.ttb	0.504
VBA32	3.12.8.10	20081221.0810	2008-12-21	Trojan-Banker.Win32.Banker.ttb	1.398
ViRobot	20081222	2008.12.22	2008-12-22	-	0.398
VirusBuster	4.5.11.10	10.100.1/731735	2008-12-21	-	2.856
卡巴斯基	5.5.10	2008.12.22	2008-12-22	-	0.454
安博士V3	2008.12.22.00	2008.12.22	2008-12-22	Win-Trojan/Banker.478208.I	1.612
安天	2.0.18	20081222.1879989	2008-12-22	-	0.125
江民杀毒	11.0.706	2008.12.21	2008-12-21	-	5.032
熊猫卫士	9.05.01	2008.12.21	2008-12-21	Trj/Banker.FWD	4.393
瑞星	20.0	21.09.02.00	2008-12-22	-	1.637
赛门铁克	1.3.0.24	20081221.020	2008-12-21	Infostealer.Bancos	0.107
趋势科技	8.700-1004	5.726.04	2008-12-22	-	0.110
迈克菲	5.3.00	5471	2008-12-21	PWS-Banker	2.670
金山毒霸	2008.9.8.18	2008.12.22.17	2008-12-22	-	0.771
飞塔	2.81-3.117	9.837	2008-12-21	-	1.027

这个是aviconverter的卸载程序

[ 本帖最后由 Joker 于 2008-12-22 20:49 编辑 ]

su-tt

C:\Documents and Settings\Administrator\桌面\Uninstall.rar > RAR > Uninstall.exe - 可能是 Win32/Spy.Banker 特洛伊木马 的变种

挪威的冬天

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/22 20:13

Uninstall.exe      --------      安全


理论文件总数:        1
实际文件总数:        1

其中:

安全: 1

识别率为: 100%

su-tt

不奇怪，上周我flashget的update.exe还被NIS2009报木马

Joker

We could not find a virus in the attachment you have sent us.
This is a false positive. We will take out the pattern recognition in one of our next updates.