红伞报的4个文件

pazh3336

红伞上报分析结果说有一个是误报
File ID      Filename      Size (Byte)     Result
25045920      GHOSTEXP.EXE      597.21 KB      MALWARE
25058015      RUNSCANNER.EXE      35.65 KB      MALWARE
25392854      PASSWDRENEW.EXE      263 KB      MALWARE
25345058      WINKEY.EXE      38 KB      FALSE POSITIVE


Please find a detailed report concerning each individual sample below:
Filename     Result
GHOSTEXP.EXE      MALWARE

The file 'GHOSTEXP.EXE' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.611542. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename     Result
RUNSCANNER.EXE      MALWARE

The file 'RUNSCANNER.EXE' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.36864.T. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.00.143.
Filename     Result
PASSWDRENEW.EXE      MALWARE

The file 'PASSWDRENEW.EXE' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.NSPM.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename     Result
WINKEY.EXE      FALSE POSITIVE

The file 'WINKEY.EXE' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will not be removed due to the fact that the file does not belong to a regular piece of software. This software can be used for an evasion of security protections in several computer programs. If we will find some malicious code inside the suspicious file anyway, we will integrate the pattern recognition in one of our next updates. In case AntiVir can detect this file we will not change or remove our detection.

darreol

趋势kill3

hansyu

NIS2009
PASSWDRENEW.rar - Suspicious.MH690.A
WINKEY.RAR - Trojan Horse
GHOSTEXP.part1.rar - Trojan Horse

SUZAKU

a2 kILL ALL

Name: Trojan-Downloader.Win32.Delf!IK
Description:


A trojan-downloader is a tool that downloads a trojan horse. A trojan, also known as a trojan horse, is simply a program that pretends to be something else.

Why are trojans or trojan horses so dangerous? The basic idea is that you download a program, for example one that you think is some sort a game demo. When you run the demo, to your surprise, nothing happens. Or so you thought.

What may have happened is that you've just unwittingly run some form of program that has planted itself on your hard drive. Perhaps it's going to be a very basic application, and simply delete some files on your system. Perhaps it's an even more sinister tool that will actually give other people full access to your hard drive and system. Sounds ridiculous? It happens literally every single day, to computer users all around the world.

lingbo110120

费尔 KILL 1
MISS 2
TO费尔

黑衣~魂

這是誤報......

全部都是誤報!


[ 本帖最后由 黑衣~魂 于 2009-8-2 17:03 编辑 ]

尤金卡巴斯基

To KL

当空皓月

误报！“一键还原“的东西！

尤金卡巴斯基

Hello,




GHOSTEXP.EXE,
PASSWDRENEW.EXE,
RUNSCANNER.EXE,
WINKEY.EXE

No malicious code were found in these files.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

qreasb

瑞星2009未报毒！！！！