setup.rar(大量false alarm)

sam.to

https://www.virustotal.com/anali ... f0ffd4c91adfecfb360

Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

>
>

Sincerely yours,
Mikhail Gorshenin,
Virus Analyst.
_____________________
Kaspersky Lab Ltd
Moscow, Russia

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由 sam.to 于 2009-3-11 20:45 编辑 ]

Sebastian

The file 'setup.e2xe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.1.0.104.

sam.to

我知道了,已上报卡巴,正等待解決

kingsheet

卡巴  检测到：木马程序 Trojan.Win32.Autoit.fl        URL: http://bbs.kafan.cn/attachment.p ... X//nodlogin.au3.tbl

sam.to

你每一次都不说明理由

ledled

Name: Siggen
Type: Trojan

Description:
A malicious program that has a hidden harmful routine to exploit system vulnerabilities.

Files:
c:\users\administrator\desktop\setup.e2xe

究竟是不是false alarm

kingmuro

328397663

Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

>
> Dear Sir or Madam
>
>
> Thank you for giving us so much help.
> Please check whether the attached object and/or attached objects is false alarm or not.
> I'm using the password "infected".
>
> Attachment(s) you sent:
> setup.rar
>
> Best regards
>

Sincerely yours,
Mikhail Gorshenin,
Virus Analyst.
_____________________
Kaspersky Lab Ltd
Moscow, Russia

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

难道卡巴分析师.脑子又进水了?

黑衣~魂

dr.web
setup.e2xe - infected with Trojan.Siggen.584

應該不是誤報
http://research.sunbelt-software ... be08aa52adddbcfd196

http://www.threatexpert.com/repo ... be08aa52adddbcfd196

setup.exe : Not detected by Sandbox (Signature: NO_VIRUS)
[ DetectionInfo ]
    * Filename: C:\analyzer\scan\setup.exe.
    * Sandbox name: NO_MALWARE
    * Signature name: NO_VIRUS.
    * Compressed: YES.
    * TLS hooks: NO.
    * Executable type: Application.
    * Executable file structure: OK.
    * Filetype: PE_I386.

[ General information ]
    * Decompressing UPX3.
    * File length:       359202 bytes.
    * MD5 hash: a6aac68098601be08aa52adddbcfd196.

[ Changes to registry ]
    * Accesses Registry key "HKCU\Control Panel\Mouse".
    * Accesses Registry key "HKCU\Software\AutoIt v3\AutoIt".

kalynn84

Win32:Trojan-gen {Other}