这个是不是卡巴斯机误报？？？？？

[donjuan]

这个是不是卡巴斯机误报？？？？？

[Roger]

運行之後，出現下圖，不知有何用途

[donjuan]

这个文件没有病毒......

[balberith]

---------------------------------------------------------
_brand_ _product_ - Scan Report
---------------------------------------------------------

+ 建立時間: 上午 08:49:18 2007/7/11

+ 掃描結果:



C:\Documents and Settings\XXX\桌面\FL\a.rar/WNspack.exe -> Trojan.Pakes : 未進行動作.


::報告結束

==========

AVG Anti-Spyware 7.5.1.43 掃瞄的結果...

[Shader]

卡巴7.0 一按下載就叫了 是誤判嗎?

[donjuan]

你上報卡巴斯機﹐問他們是否誤報。。。。。。。。

[esjustin]

ImpREC.dll可能壞了(VT上只有一家偵測).

WNspack.exe倒是VT一堆報,兩個檔案都上報給Kaspersky了.

另外樓主如果可以,請自行上報給Kaspersky,只需要加個密碼,說明密碼多少(說明請用英文),Kaspersky就會處理.

[esjustin]

ImpREC.dll沒有問題.

WNspack.exe帶有威脅:Trojan.Win32.Pakes

Hello,

ImpREC.dll

No malicious code was found in this file.

WNspack.exe_ - Trojan.Win32.Pakes

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.

[donjuan]

文件是用來反向解殼 NSPacker 的﹐應該是沒有病毒的文件。。

至于卡巴斯機的回復﹐以前上報不會問你卡巴斯機程序註冊號碼﹐現在如果上報﹐你回復給卡巴斯機﹐他們就問你 Please give us your kaspersky registration number for record.........

好﹐我試試上報給卡巴斯機﹐問個明白。。看他們這次怎麼回復。。

[donjuan]

我覺得﹐如果是已經能偵察到的﹐上報給卡巴斯機﹐如果投報內容沒有祥加說明是誤報﹐卡巴斯機都是直接回復"already detected by kaspersky, please update your database.", 卡巴斯機不會進一步祥加分析, 看以上網友寄去卡巴斯機回報的電郵﹐就知道了﹐可能很多人上報 吧。。。。。。。

Dear kaspersky,

The attached file is detected by kaspersky, but I think it is a false
alarm, as the attached file is NOT a virus file, it is used to unpack file
packed with NS Packer, I wonder why kaspersky detected it as virus
file. The file does no harm into the computer. Kindly keep a look
into the attached file.

幾個幾個小時後的回復

Hello.
Sorry, it's false alarm. It's detection will be deleted in the next update. Thank you for your help.
-----------------
Regards, Vxxxxx Kxxxxx
Virus Analyst, Kaspersky Lab.

嘻嘻﹐這次沒有問我 "kindly tell us your kaspersky registration number for record."。。。。。