小红伞误报QQ医生的TSECUA.COM

显示全部楼层 · 发表于 2007-6-12 19:24:47

上报以后的回复

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00050878.

A listing of files alongside their results can be found below:

File ID Filename Size (Byte) Result
601231 TSECUA.COM 13.15 KB MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
TSECUA.COM MALWARE

The file 'TSECUA.COM' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/Tencent.22.B. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 6.38.02.17.

Alternatively you can see the analysis result here:
http://analysis.avira.com/samples/details.php?uniqueid=KIDwPHfy9vEO23mn3jjK3mL5OShG2GR7&incidentid=50878

An overview of all your submissions can be found here:
http://analysis.avira.com/samples/details.php?uniqueid=KIDwPHfy9vEO23mn3jjK3mL5OShG2GR7

Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com
Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

看来需要把文件修改一下并且做个详细说明再上报给红伞
大大们辛苦一下吧~

显示全部楼层 · 发表于 2007-6-12 19:47:03

...
直接排除

显示全部楼层 · 发表于 2007-6-12 20:48:28

我用的2007BETA2,没报啊

显示全部楼层 · 发表于 2007-6-12 21:00:39

直接删除。o(∩_∩)o...哈哈

显示全部楼层 · 发表于 2007-6-13 07:44:15

qq的东西果然不干净啊
我会再上报的

显示全部楼层 · 发表于 2007-6-13 07:56:54

原帖由 jiyizdy 于 2007-6-12 20:48 发表
我用的2007BETA2,没报啊

我的也没报

显示全部楼层 · 发表于 2007-6-13 08:35:57

要更新一下QQ医生
这个文件也需要改一下MD5再上报~还得附带一个详细说明

这个文件本来就用于修复的，有些可疑行为很正常啊

显示全部楼层 · 发表于 2007-6-13 09:36:28

看antivri报的名字就知道排除无望了。。
ADSPY/Tencent.22.B