卡巴指这些文件沒有惡意(请测试)

显示全部楼层 · 发表于 2008-12-27 17:25:27

avsat 报

显示全部楼层 · 发表于 2008-12-27 20:59:33

McAfee 全灭。。

显示全部楼层 · 发表于 2008-12-27 23:32:29

Start of the scan: 2008年12月27日  23:27
Starting the file scan:
Begin scan in 'C:\Documents and Settings\***\桌面\样本'
C:\Documents and Settings\***\桌面\样本\07BC7C1C0130D26B7155EE944543E49F89E377E4
[DETECTION] Is the TR/Small.DBY.AA.2 Trojan
[NOTE]    A backup was created as '499849b3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\样本\65DDB7E5C0493F117AF822483EFE5468783D921A
[DETECTION] Contains recognition pattern of the WORM/Zhelatin.Gen worm
[NOTE]    A backup was created as '499a49b1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\样本\8B1315F22989DF58A960C2EBDB5DD4691B733D24
[DETECTION] Is the TR/Fakealert.acr.7 Trojan
[NOTE]    A backup was created as '498749be.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\样本\8B1D4FB83C7534138E5FEB73B35EA1EFB931FE31
[DETECTION] Is the TR/Packed.20192 Trojan
[NOTE]    A backup was created as '498749bf.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\样本\8DF7D8B4F39CBF9D4E99B8FD0ACAB30705B7488D
[DETECTION] Is the TR/ARPSpoof.32768 Trojan
[NOTE]    A backup was created as '499c49c1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\样本\8E8529FA62AF255C9178E4A7BC12BE304B57AEFD
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '498e49c2.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年12月27日  23:27
Used time: 00:05 Minute(s)
The scan has been done completely.
   1 Scanning directories
   6 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   6 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes
-----------------------------------------------------------------------------------
红伞S版(库V7.01.01.37）杀。

显示全部楼层 · 发表于 2008-12-28 00:08:06

第2个分析師也告訴我这文件沒惡意...

显示全部楼层 · 发表于 2008-12-28 14:18:16

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... ab&t=1230445072
Information: Contains recognition pattern of the WORM/Zhelatin.Gen worm

显示全部楼层 · 发表于 2008-12-28 19:49:54

原帖由 sam.to 于 2008-12-28 00:08 发表
第2个分析師也告訴我这文件沒惡意...

卡巴的启发引擎报了，要么是启发引擎误报，要么是分析师出错。

显示全部楼层 · 发表于 2008-12-28 20:15:15

那个Tibs好像是感染型的

[ 本帖最后由 allinwonderi 于 2008-12-28 20:17 编辑 ]

显示全部楼层 · 发表于 2008-12-28 20:20:02

除非输入表和输出表有问题，杀软才会报。。

显示全部楼层 · 发表于 2008-12-28 20:22:33

C:\Documents and Settings\GUNDAM\桌面\7.rar » RAR » 8B1315F22989DF58A960C2EBDB5DD4691B733D24 - Win32/TrojanDownloader.FakeAlert.HJ trojan
C:\Documents and Settings\GUNDAM\桌面\7.rar » RAR » 8E8529FA62AF255C9178E4A7BC12BE304B57AEFD - a variant of Win32/TrojanDownloader.FakeAlert.FF trojan

显示全部楼层 · 发表于 2008-12-28 22:30:04

Hello!
Thank you for sending us the file.
It is not false detection.
8E8529FA62AF255C9178E4A7BC12BE304B57AEFD - Hoax.Win32.Renos.vbfh

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

第3次上报

[病毒样本] 卡巴指这些文件沒有惡意(请测试)

本帖子中包含更多资源

Norman Virus Control 5.99

本帖子中包含更多资源