卡饭论坛's Archiver



easybeing 发表于 2008-8-16 19:20

KaFan Virlist【08.08.01-08.08.15】中有几个卡巴不认为是病毒

这是我上报的结果:
Hello, 080802-1-0.exe_ - not-a-virus:FraudTool.Win32.Agent.an,
080802-1-3.exe_ - not-a-virus:FraudTool.Win32.Agent.am,
080802-3-9.exe_ - not-a-virus:Dialer.Win32.Small.gen,
080806-A1-62.exe_ - not-a-virus:FraudTool.Win32.WinAntiVirus.aq,
080806-A1-64.exe_ - not-a-virus:FraudTool.Win32.WinAntiVirus.as
080808-A2-3.exe_ - not-a-virus:FraudTool.Win32.Agent.aq,
080808-A2-71.exe_ - not-a-virus:FraudTool.Win32.Agent.ar,
080808-A2-72.exe_ - not-a-virus:FraudTool.Win32.WinAntiVirus.au
These files are already detected by our extended bases as potentially risk programs. 080809-A1-1.exe_ No malicious code was found in this file.
080808-A2-123.exe - not-a-virus:AdWare.Win32.Cinmus.pol
This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
080809-A2-31.exe - not-a-virus:FraudTool.Win32.AntiSpyWare2008.n
080812-1-5.exe
No malicious code was found in this file
080808-3-0.exe - not-a-virus:Downloader.Win32.Antivirus2009.al,
080808-4-6.exe - not-a-virus:FraudTool.Win32.AntiVirus2008.ap
080808-A2-75.exe
No malicious code was found in this file.
080802-A1-1.exe - not-a-virus:FraudTool.Win32.UltimateAntivirus.as,
080805-1-1.exe - not-a-virus:FraudTool.Win32.AntiVirus2008.ao
These files are already detected by our extended bases as potentially risk programs.
080807-6-10.exe
No malicious code was found in this file.

syfwxmh 发表于 2008-8-16 19:32

很正常~卡巴的入库标准的问题~~不过可以把其不认为是病毒的重新上报~~并附上你为什么认为是病毒,他就会重新审查的

easybeing 发表于 2008-8-16 19:33

回复 2楼 syfwxmh 的帖子

呵呵,偶没那么高水平去分析。。。

syfwxmh 发表于 2008-8-16 19:35

回复 3楼 easybeing 的帖子

你可以说让他可以尝试去运行一下,就可以发现其恶意行为了~~

palfan 发表于 2008-8-16 20:33

有几个后来经组内讨论,的确应该剔除,白鼠忽略了,比如080807-6-7.exe、080807-6-10.exe、080807-8-2.exe

WillBeNextKido 发表于 2008-8-16 21:50

not-a-virus 虽然不是病毒 但是属于spy之类的

syfwxmh 发表于 2008-8-16 21:54

回复 6楼 spicalhook 的帖子

有些连not a virus都不是~~仔细看~

gankeyu 发表于 2008-8-16 22:00

回复 7楼 syfwxmh 的帖子

的确有no mal code...是不是再让卡巴分析一遍?我觉得测试区应该定一个标准.

syfwxmh 发表于 2008-8-16 22:05

回复 8楼 gankeyu 的帖子

分析的时候难免有失误,不过这已经很不错了~
至于No malicious code was found in this file我觉得最好LZ在上报一次,并附上说明~

easybeing 发表于 2008-8-16 22:13

嗯,我在上报一次

syfwxmh 发表于 2008-8-16 22:15

辛苦~~

页: [1]

Powered by Discuz! Archiver 6.1.0  © 2001-2007 Comsenz Inc.