误报品种（好多杀软都报）

显示全部楼层 · 发表于 2007-5-11 19:59:35

………………
误报，报壳。鉴定完毕。

显示全部楼层 · 发表于 2007-5-11 21:51:29

都在报壳。。。。。。无聊

显示全部楼层 · 发表于 2007-5-11 22:26:29

发现上报symantec也会回复，先是一个自动，有问题然后过十几个小时回复你说那个是啥毒。这个上报看看他们啥反应

仅仅限于启发的东西

[ 本帖最后由 allenhippo 于 2007-5-11 22:29 编辑 ]

显示全部楼层 · 发表于 2007-5-12 20:02:27

This message is an automatically generated reply.  This system is designed to
analyze and process virus submissions into the Symantec Security Response and
cannot accept correspondence or inquiries.
Please contact your Technical Support representative if more detailed
information about your submission is required.  Do not reply to this message.

Below is a status update on your virus submission:

Date: May 12, 2007

allen hippo

Dear allen hippo,

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename: g:\download\virus\zzllk\zzllk.exe
machine: HOME
result: NAV is falsely identifying this file as a virus

filename: g:\download\virus\zzllk\zzllk.exe
machine: HOME
result: NAV is falsely identifying this file as a virus

Developer notes:
g:\download\virus\zzllk\zzllk.exe is falsely identified as malicious. To fix
this problem, please follow the instruction at the end of this email message to
install the latest available definitions.  Then, restore this file from NAV
Quarantine.
g:\download\virus\zzllk\zzllk.exe is falsely identified as malicious. To fix
this problem, please follow the instruction at the end of this email message to
install the latest available definitions.  Then, restore this file from NAV
Quarantine.

The sample(s) that you provided are not infected with a virus, worm, or Trojan,
and do not contain malicious code. It appears to be a false identification.  To
solve the false identification problem, please follow the instruction at the end
of this email message to download and install the latest RapidRelease
definitions.

Virus definition detail:

Sequence Number: 68408
Defs Version:    90512c
Extended Version: 05/12/2007 rev.3
----------------------------------------------------------------------
This message was generated by Symantec Security Response automation

Should you have any questions about your submission, please contact
our regional technical support from the Symantec website
(http://www.symantec.com/techsupp/)
and give them the tracking number in the subject of this message.

显示全部楼层 · 发表于 2007-5-12 20:19:19

无法测试

在谁的机子上跑得动？

显示全部楼层 · 发表于 2007-5-12 20:31:08

可以运行的

我256的内存就可以

只不过会跳出内存不足而已不过还是打的开

显示全部楼层 · 发表于 2007-5-12 21:03:16

Hello.
No malicious software was found in the attached file.

Please quote all when answering.
-----------------
Regards, Kirill Erakhtin
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
http://www.kaspersky.com/trials - trial version

> Attachment: zzllk.zip

显示全部楼层 · 发表于 2007-5-12 23:29:46

LS的竟然还上报。。。很明显是报壳的东西。。。。

显示全部楼层 · 发表于 2007-5-12 23:35:07

为了让其他人明白

[病毒样本] 误报品种（好多杀软都报）

本帖子中包含更多资源

回复 #18 EQ2 的帖子