报的都是误报

显示全部楼层 · 发表于 2007-4-20 15:46:30

RT

[ 本帖最后由 promised 于 2007-4-20 15:48 编辑 ]

显示全部楼层 · 发表于 2007-4-20 15:47:39

Scan performed at: 2007-4-20 15:47:41
Scanning Log
NOD32 version 2206 (20070420) NT
Command line: C:\Documents and Settings\EQ2\桌面\drwtsn32.rar
Operating memory - is OK

Date: 20.4.2007 Time: 15:47:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\drwtsn32.rar
C:\Documents and Settings\EQ2\桌面\drwtsn32.rar ?RAR ?drwtsn32.exe - probably a variant of Win32/Agent.NDA trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:47:51 Total scanning time: 6 sec (00:00:06)

显示全部楼层 · 发表于 2007-4-20 15:47:59

2007-4-20 15:46:59
已删除 (清理失败，因为该检测项不可清理)drwtsn32.exe
New Malware.w (特洛伊)

奇怪，最近启发个不停

显示全部楼层 · 发表于 2007-4-20 15:50:37

antivir不杀nsanti了？？
不过nod真是。。
可以确定是误报了。。
File: drwtsn32.exe
Status: INFECTED/MALWARE
MD5 4f3d730ef7da167461a9d5068e593af6
Packers detected: PE_PATCH.NSANTI, NSANTI, UPX

Scanner results
Scan taken on 20 Apr 2007 07:47:29 (GMT)
AntiVir Found nothing
ArcaVir Found nothing
Avast Found Win32:MianCrypt-gen
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found Possibly a new variant of W32/PWStealer1!Generic
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found probably a variant of Win32/Agent.NDA (probable variant)
Norman Virus Control Found W32/Hupigon.gen8
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found Packed/NSPM
VBA32 Found nothing

显示全部楼层 · 发表于 2007-4-20 15:50:41

原帖由 EQ2 于 2007-4-20 15:47 发表
Scan performed at: 2007-4-20 15:47:41
Scanning Log
NOD32 version 2206 (20070420) NT
Command line: C:\Documents and Settings\EQ2\桌面\drwtsn32.rar
Operating memory - is OK

Date: 20.4.2007 ...

NOD32这次启发是误报。。

显示全部楼层 · 发表于 2007-4-20 15:51:12

楼上几位都在努力的证明自己的杀毒软件误报

显示全部楼层 · 发表于 2007-4-20 15:53:06

上报给eset去了。。。。。很少见到这种启发式报法是误报

显示全部楼层 · 发表于 2007-4-20 16:16:59

VB又报壳了。。。。。。

显示全部楼层 · 发表于 2007-4-20 17:55:59

系统文件加壳。。。。。

报的都是误报。。

显示全部楼层 · 发表于 2007-4-20 18:28:03

其实我个人是感觉咖啡的误报实在还是太少了
最好要能达到像小红伞那种需要设立误报文件收集专门贴的地步才好呢

最好也来个报壳的功能的让我爽一下

[病毒样本] 报的都是误报

本帖子中包含更多资源

nod32启发式干掉

MCAFEE：

回复 #5 promised 的帖子