关于红伞报QQ（tsepb.dat）病毒，上报后给如下回复

joeyouwei

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00242390.


A listing of files alongside their results can be found below:

File ID	?Filename	Size (Byte)	Result
25216814	tsepb.dat	56.31 KB	MALWARE

Please find a detailed report concerning each individual sample below:

?Filename	Result
tsepb.dat	MALWARE

The file 'tsepb.dat' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.jag. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.01.21. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

Alternatively you can see the analysis result here:
http://analysis.avira.com/samples/details.php?uniqueid=CgCTxQ7rTMXzxkAx2WpCKkFxOdvJ42NN&incidentid=242390

An overview of all your submissions can be found here:
http://analysis.avira.com/samples/details.php?uniqueid=CgCTxQ7rTMXzxkAx2WpCKkFxOdvJ42NN

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com
Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------
仍然认为tsepb.dat此文件是恶意软件或病毒。

451102995

没错～认为是病毒！

saga3721

红伞以后也还是别进入中国市场了，否则这种木马就不能报了

@wat@

难道外国的木马与中国的不同？

我报过  要是红伞认为它不是病毒的话 早就没人问这个问题了 所以说QQ是最流氓地~~~

Beloved

报QQ很正常

用过hips的，就可以看到QQ的小动作有多少了

嗜血独狼

恶意软件的本质怎么会改变

浙江一哥

哎我上次上报也是依然认为病毒  不知道怎么回事 难道腾讯太流氓

幻石

看来确认是病毒了。。。。

不过我一直用2008，没报过。。

幻石

Welcome back, Mr joeyouwei!A listing of files alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25216814	tsepb.dat	56.31 KB	FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename	Result
tsepb.dat	FALSE POSITIVE

The file 'tsepb.dat' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Overview



这是楼主发的地址打开后的结果啊？？？？是误报，而且说下次升级后会从病毒库中移除的。。


http://analysis.avira.com/samples/details.php?uniqueid=CgCTxQ7rTMXzxkAx2WpCKkFxOdvJ42NN&incidentid=242390