I'm JJ

显示全部楼层 · 发表于 2007-5-23 12:18:11

不就是生成两个库文件吗……

你不告知用户就私自生成2个莫明其妙的文件，杀软认为是病毒衍生物了

显示全部楼层 · 发表于 2007-5-23 16:44:46

我也有同样的问题啊！

我的帖子：http://bbs.kafan.cn/viewthread.php?tid=87808&extra=page%3D1

刚才用红伞C版扫硬盘，报了！

扫描记录：
C:\Documents and Settings\auto\桌面\软件\Nod32Key.rar
  [0] Archive type: RAR
  --> Nod32Key\NOD32 Õý°æÉý¼¶ID»ñÈ¡Æ÷.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.bio.1
   [INFO]    A backup was created as '46b7ece2.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!
C:\Documents and Settings\auto\桌面\软件\Nod32Key\NOD32 正版升级ID获取器.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.bio.1
   [INFO]    A backup was created as '4697ecd9.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

有乱码EXE！！

显示全部楼层 · 发表于 2007-5-24 17:34:51

红伞

显示全部楼层 · 发表于 2007-5-26 19:55:34

在次回報給紅傘依舊認為有問題
Avira Virus Lab:
The file 'NOD32ID.exe' has been determined to be 'MALWARE'. Our
analysts named the threat TR/Drop.Agent.bio.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.174.
--------------
我附上紅傘分析員的分析在回報大廠,

卡巴斯基非常多次確認,檔案是乾淨的~
Yes,that was actually our false alarm.
Please quote all when answering.

Regards, Yampolsky Boris
Virus Analyst, Kaspersky Lab.
-------------
drweb-labs大蜘蛛實驗室好像也認為是沒問題,信件上寫ok~應該是指沒問題吧?!我沒會回報過大蜘蛛不清楚,有誤請指正,謝謝~
NOD32ID.zip - archive ZIP (password infected)
>NOD32ID.zip/NOD32ID.exe packed by UPX
>>NOD32ID.zip/NOD32ID.exe - Ok

Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.

我上報好幾十家目前只有這兩家率先回覆~

再看看其他分析員說的吧~看來誤報機率高~

显示全部楼层 · 发表于 2007-5-26 20:40:49

原帖由福田于 2007-5-23 16:44 发表
我也有同样的问题啊！

我的帖子：http://bbs.kafan.cn/viewthread.php?tid=87808&extra=page%3D1

刚才用红伞C版扫硬盘，报了！

扫描记录：
C:\Documents and Settings\auto\桌面\软件\Nod3 ...

？antivir不是已经支持双字节了？