avast！误报不可忽视

allinwonderi

都说小红伞误报率高，昨天试用了avast!，结果查出熊猫的DOS版，中了Nimda和Kuang2,我用其他杀软查了，百分百没毒！

jlennon

都不低

欠妳緈諨

怕误报用NOD或咖啡好了

solcroft

最好是先把事实搞清楚再来说
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=53

[ 本帖最后由 solcroft 于 2007-5-7 01:25 编辑 ]

jlennon

无法访问

闪电战

一个不能说明问题
是个杀软就会有误报

solcroft

修改连接了，抱歉
顺便把知识库的解释贴出来

Viruses have been detected in some of the 'Panda Antivirus' files on my computer (Win95:Matyas and Win32:Kuang2 in PAV.SIG mainly). Why is this?

Solution: This is a known problem.

Every virus can be identified, because it contains some unique signatures. Antiviral programs have their own database of those signatures. We call this database the "virus definition file".
When an antiviral program scans a file for viruses, it compares all the signatures (of all viruses) in the database with the signatures in that file. If the signatures match (they are the same), the file is marked as infected. For an antivirus program, it is important to hide this database of signatures somehow - e.g. by encrypting it. Panda Antivirus does not encrypt its virus database - the signatures inside are clearly "visible" to other antiviral programs, so they detect this file as infected (but there is actually no virus inside - only the signatures are the same).

We can´t do anything about that, only recommend not to use two or more antiviral programs at the same time, or put those files to the list of exclusions, so they will not be scanned anymore.

wwqwwq

既然“Panda Antivirus does not encrypt its virus database - the signatures inside are clearly "visible" to other antiviral programs.”那应该所有杀软或者大部分杀软都报毒啊？为什么只有avast报呢？谁给解释一下？这不是误报是什么？

buycard

哈哈，楼上问的好！


因为除了Avast，其他杀毒软件都超级烂，连误报都不会

PS:Panda的病毒库文件没记错的话是pav.sig，而根本不是这2个主程序。

[ 本帖最后由 buycard 于 2007-5-7 00:46 编辑 ]

7sumetai

是不是因为特征码的定义过分敏感了？