小红伞重大更新啦

popolong

在官方说更新修正了误报。在更新后发现了几个东西
1.发现误报情况好了很多，我前几天上报的那些基本都不会误报了，还剩几个或许可能真的有问题。
顺带说一下，我居然一口气收到了好几天前几天的上报文件的回复报告，内容都是十分的详细（在下面附上一篇）。
2.发生病毒库的版本有改动了。
昨天升级还是6.37.0.241，今天一看，是6.37.1.1。

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00009780.




We received the following archive files:



File ID  Filename  Size (Byte) Result
199352  ab.rar 3.587.251 OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
199353  AntiArpSniffer.exe  508.010  FALSE POSITIVE
199354  BDLiveUpdate.exe  30.720  FALSE POSITIVE
199355  eAPI.fne  335.872  FALSE POSITIVE
199356  HijackThis1991zww.exe  218.456  FALSE POSITIVE
199357  ImportREC V1.6F   193.024  FALSE POSITIVE
199358  INTERNET.fne  196.608  FALSE POSITIVE
199359  JBIG.DLL  16.384  FALSE POSITIVE
199360  KDTAnywhereS.exe  327.680  FALSE POSITIVE
199361  kvup.exe  20.856  FALSE POSITIVE
199362  MacScan.exe  386.666  FALSE POSITIVE
199363  MMViewer.exe  241.664  FALSE POSITIVE
199364  OSEditor.exe  52.649  FALSE POSITIVE
199365  PSunMMalpe.exe  677.888  FALSE POSITIVE
198136  qqldrfmt.dll  12.800  FALSE POSITIVE
199366  QQMusic.exe  300.544  FALSE POSITIVE
199367  shell.fne  57.344  FALSE POSITIVE
199368  SlideShow.exe  41.472  FALSE POSITIVE
199369  spec.fne  81.920  FALSE POSITIVE
199370  Update2.exe  15.872  MALWARE
199371  vsEnFolder.exe  76.288  MALWARE
199372  W32Dasm.exe  411.648  FALSE POSITIVE
199373  自动更新.exe  211.456  FALSE POSITIVE


Please find a detailed report concerning each individual sample below:

Filename Result  AntiArpSniffer.exe  FALSE POSITIVE

The file 'AntiArpSniffer.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  BDLiveUpdate.exe  FALSE POSITIVE

The file 'BDLiveUpdate.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  eAPI.fne  FALSE POSITIVE

The file 'eAPI.fne' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  HijackThis1991zww.exe  FALSE POSITIVE

The file 'HijackThis1991zww.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  ImportREC V1.6F   FALSE POSITIVE

The file 'ImportREC V1.6F ' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  INTERNET.fne  FALSE POSITIVE

The file 'INTERNET.fne' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  JBIG.DLL  FALSE POSITIVE

The file 'JBIG.DLL' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  KDTAnywhereS.exe  FALSE POSITIVE

The file 'KDTAnywhereS.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  kvup.exe  FALSE POSITIVE

The file 'kvup.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  MacScan.exe  FALSE POSITIVE

The file 'MacScan.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  MMViewer.exe  FALSE POSITIVE

The file 'MMViewer.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  OSEditor.exe  FALSE POSITIVE

The file 'OSEditor.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  PSunMMalpe.exe  FALSE POSITIVE

The file 'PSunMMalpe.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  qqldrfmt.dll  FALSE POSITIVE

The file 'qqldrfmt.dll' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  QQMusic.exe  FALSE POSITIVE

The file 'QQMusic.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  shell.fne  FALSE POSITIVE

The file 'shell.fne' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  SlideShow.exe  FALSE POSITIVE

The file 'SlideShow.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  spec.fne  FALSE POSITIVE

The file 'spec.fne' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  Update2.exe  MALWARE

The file 'Update2.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Collection Crap (CC). The file is either souce code of a malware, a damaged file or another related but non malicious file. Detection is added to our virus definition file (VDF) starting with version 6.37.00.202.
Filename Result  vsEnFolder.exe  MALWARE

The file 'vsEnFolder.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/HideProc.H.1. Detection is added to our virus definition file (VDF) starting with version 6.36.01.118.
Filename Result  W32Dasm.exe  FALSE POSITIVE

The file 'W32Dasm.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.
Filename Result  自动更新.exe  FALSE POSITIVE

The file '自动更新.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 popolong 于 2007-1-31 11:40 编辑 ]

周杰伦

大家要继续上报，这样红伞就会越来越完美了

hzq277284

看来误报改进了不少

Oceanzd

果然不出所料。。。只是增加了白名单。。。

popolong

原帖由 jzhhh 于 2007-1-31 11:56 发表
果然不出所料。。。只是增加了白名单。。。

你怎么知道是增加了白名单。要有理由的。

ccw8642

支持伞儿~~~~！

451102995

今天紅傘在綫官方更新速度竟然到12K每秒....而且是一直保持這個速度.....哈哈~~~紅傘自從更新到3.0引擎以後....官方在綫更新的速度越來越快咯~~~~

duanyanbin

引擎由32升到33了

451102995

對.....今天更新完以後...引擎已經到V7.03.01.33....

luyu918

我的上报回复为什么没有那么多啊？！就几句话？！