今天更新了病毒库报双扣病毒了，请大家帮忙看看，附样本。

显示全部楼层 · 发表于 2009-11-13 14:17:12

很老的一个程序了，好像是Win98的时候联想电脑附送的小游戏，因为家里面人喜欢玩一直留到现在，可是今天开机红伞更新以后就报病毒，很奇怪，请大家帮忙看看，谢谢。

样本附在下面了，只上传了主exe文件，其他没传。

显示全部楼层 · 发表于 2009-11-13 14:21:30

实机运行了，无异常动作。误报

显示全部楼层 · 发表于 2009-11-13 14:23:02

FP to avira

显示全部楼层 · 发表于 2009-11-13 14:30:46

好像还真是误报了...传到virscan结果如下...

http://www.virscan.org/report/e9 ... a0d06373bd4181.html

给红伞上报文件了~

[ 本帖最后由 kickui 于 2009-11-13 14:34 编辑 ]

显示全部楼层 · 发表于 2009-11-13 14:46:10

纯粹误报

显示全部楼层 · 发表于 2009-11-13 22:35:08

如果相信它就排除了。。

显示全部楼层 · 发表于 2009-11-14 00:13:39

收到红伞的回复了~~

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00396507.

A listing of files alongside their results can be found below:

File ID Filename Size (Byte) Result
25495871 TRACTOR.EXE 1.5 MB FALSE POSITIVE

Please find a detailed report concerning each individual sample below:

Filename Result
TRACTOR.EXE FALSE POSITIVE

The file 'TRACTOR.EXE' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=396507

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... ppAwI0Wdvt6sLIpUxdQ

Please note: If you have specific questions please address them to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

看来的确是误报了~~

显示全部楼层 · 发表于 2009-11-14 10:27:28

360 miss

今天更新了病毒库报双扣病毒了，请大家帮忙看看，附样本。

本帖子中包含更多资源