看看你的杀软查的准不准

路沉

经常看弟兄们用相同的病毒包,测试不同杀软的查杀能力,评估杀软好坏的标准,不外是谁查出来的病毒多,谁就是好杀软.
真的是这样吗,有没有被冤枉的?我们今天来测试下,看看你的杀软查的准不准,估计结果要大跌眼镜了,呵呵.
可以告诉大家,文件无毒,但很多杀软会报毒.有没有毒,很简单在SSM环境下运行下就知道了.哎,现在杀软错杀的真的很多

mmll888

Begin scan in 'O:\te.rar'
O:\te.rar
  [0] Archive type: RAR
  --> te.exe
      [DETECTION] Is the Trojan horse TR/Agent.32768.E
      [INFO]      The file was deleted!

Begin scan in 'O:\Vise.rar'
O:\Vise.rar
  [0] Archive type: RAR
  --> Vise.exe
      [DETECTION] Is the Trojan horse TR/Agent.32768.E
      [INFO]      The file was deleted!

yzt1004

楼主确定无毒？游戏貌似很多有问题。

紫外线

nod报了.. -_-!

bigooo

不好意思，不准哦，小红伞都报了

路沉

原帖由 yzt1004 于 2007-2-8 14:42 发表
楼主确定无毒？游戏貌似很多有问题。

无毒!人格担保,第一样本其实就是边锋"三英战吕布"游戏,很多人都玩的.
不放心的话,可以在虚拟机或者影子系统下试下,最好在SSM环境下,看看有没有后门程序在偷偷运行,也可以用微点或者费尔查下,因为它们是根据程序的行为特征来判断是否是病毒木马的,准确率会更高些.
最后我们为那些被冤死的软件默哀3分钟

mofunzone

运行了的确不是病毒，看来nod的误报没好多少
都已经上报false postivie
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
204026         Vise.exe         1.548.288         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
Vise.exe         UNDER ANALYSIS


The file 'Vise.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
204027         te.exe         93.184         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
te.exe         UNDER ANALYSIS


The file 'te.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

zzh161

两个费尔都报广告程序，杀掉 了

turkey2k6

驱逐舰也报了

路沉

原帖由 bigooo 于 2007-2-8 14:57 发表
不好意思，不准哦，小红伞都报了

不奇怪,咔吧\NOD32\DR.WEB也报,江民\瑞星\微点,认为无毒!
下面是图1是我在机器上运行的照片
图2是程序属性的照片,还从来没见过病毒作者会留下这些信息的



[ 本帖最后由 路沉 于 2007-2-8 15:51 编辑 ]