非主流包括红伞说是毒，但主流大都不报的（确为误报）

显示全部楼层 · 发表于 2009-10-15 16:26:47

把它解剖了吧

[attach]643000[/attach

[ 本帖最后由 saga3721 于 2009-10-16 13:19 编辑 ]

显示全部楼层 · 发表于 2009-10-15 22:41:46

McAfee BackDoor-DRV.gen.c

显示全部楼层 · 发表于 2009-10-15 23:29:14

是一个设置IP的工具

显示全部楼层 · 发表于 2009-10-15 23:30:20

MSE不报

显示全部楼层 · 发表于 2009-10-16 11:12:27

应该没有问题.....

显示全部楼层 · 发表于 2009-10-16 13:08:28

NOD32和MSE不报

显示全部楼层 · 发表于 2009-10-16 13:12:02

RIS2010

显示全部楼层 · 发表于 2009-10-16 13:18:59

确为误报，红伞下次更正

File ID 燜ilename Size (Byte) Result
25473725  Dropper.rar 537.31 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
25473606  Dropper.exe  580 KB  FALSE POSITIVE
9066747  krnln.fnr  1.05 MB  KNOWN CLEAN

Please find a detailed report concerning each individual sample below:

燜ilename Result
Dropper.exe  FALSE POSITIVE

The file 'Dropper.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates. A detailed description can be found on our web page

显示全部楼层 · 发表于 2009-10-16 13:21:25

AVG Free 9.0 偵測到!

Dropper.rar:\Dropper.exe 特洛伊木馬 Generic_c.BXHU 已移至病毒隔離區"

[误报文件] 非主流包括红伞说是毒，但主流大都不报的（确为误报）

本帖子中包含更多资源

本帖子中包含更多资源