誇張誤報-BD誤報純TXT的LOG??

黑衣~魂

這個誤報我完全不知道誤報基準在哪裡

因為BD報了我怕分析有誤先提交DW確認再說

Dear ~ 魂 ~,
Your submission has been analyzed. This file presents no threat to your system.
This is a text file with some list
Thank you for the cooperation.
--
Yours sincerely,
Virus Monitoring Service
Doctor Web Ltd.

這個副檔名錯誤並不是DLL而是TXT內容疑似某AV之掃描報表

Files to delete:
C:\Arquivos de programas\GBPLUGIN\cef.gpc
C:\Arquivos de programas\GBPLUGIN\uni.gpc
C:\Arquivos de programas\GBPLUGIN\gbiehUni.dll
C:\Arquivos de programas\GBPLUGIN\gbiehcef.dll
C:\Arquivos de programas\GBPLUGIN\gbpdist.dll
C:\Arquivos de programas\GBPLUGIN\gbpsv.exe
C:\Arquivos de programas\GBPLUGIN\bb.gpc
C:\Arquivos de programas\GBPLUGIN\gbieh.dll
C:\Arquivos de programas\GBPLUGIN\gbieh.gmd
C:\Arquivos de programas\Scpad\scpIBCfg.bin
C:\Arquivos de programas\Scpad\scpLIB.dll
C:\Arquivos de programas\Scpad\scpMIB.dll
C:\Arquivos de programas\Scpad\scpsssh2.dll
C:\Arquivos de programas\Scpad\sshib.dll
C:\Program Files\GBPLUGIN\cef.gpc
C:\Program Files\GBPLUGIN\uni.gpc
C:\Program Files\GBPLUGIN\gbiehUni.dll
C:\Program Files\GBPLUGIN\gbiehcef.dll
C:\Program Files\GBPLUGIN\gbpdist.dll
C:\Program Files\GBPLUGIN\gbpsv.exe
C:\Program Files\GBPLUGIN\bb.gpc
C:\Program Files\GBPLUGIN\gbieh.dll
C:\Program Files\GBPLUGIN\gbieh.gmd
C:\Program Files\Scpad\scpIBCfg.bin
C:\Program Files\Scpad\scpLIB.dll
C:\Program Files\Scpad\scpMIB.dll
C:\Program Files\Scpad\scpsssh2.dll
C:\Program Files\Scpad\sshib.dll


Folders to delete:
C:\Arquivos de programas\GBPLUGIN

VT-
Http://www.virustotal.com/analisis/9870aa05cf14a87da50c108c72674d912542efcad9b8b076056f97d8a4a33fde-1248970771

BitDefender	7.2	2009.07.30	Trojan.Banker.Delf.YUV
CAT-QuickHeal	10.00	2009.07.30	-
ClamAV	0.94.1	2009.07.30	Trojan.Banker-196

GData	19	2009.07.30	Trojan.Banker.Delf.YUV
Ikarus	T3.1.1.64.0	2009.07.30	Trojan.Banker.Delf

[ 本帖最后由 黑衣~魂 于 2009-7-31 00:23 编辑 ]

王子带着刀

C:\Documents and Settings\Administrator\桌面\tr-204-4.rar/tr-204-4.DLL         已检测: Trojan.Banker.Delf!IK

王子带着刀

黑衣~魂

還真的誤報..................

誇張爆了....真不知道當初怎樣入庫的

不過就是個TXT改成DLL

[ 本帖最后由 黑衣~魂 于 2009-7-31 00:29 编辑 ]

Palkia

bd的库这么多~

昨天看360升级好像已经有360w+了

难免会碰巧对上的~

黑衣~魂

我難以置信的

如果是EXE或DLL可能是加殼或行為不小心觸發啟發式或已知庫誤報,任何AV都會有的

但這其實只是個TXT紀錄LOG資訊.....誇張的地方是不知道誤報基準....

就算用系統分析也收集不到任何資訊,分析師看更不可能入庫的........

悠柚

fp to iobit