瑞星卡卡安全论坛

首页 » 个人产品讨论区 » 瑞星杀毒软件 » 瑞星杀毒软件2011 » 瑞星把Teracopy判断为病毒?
cagen - 2010-2-3 18:55:00
瑞星杀毒结果,判断Teracopy.exe为 “可疑:Packer.Win32.UnkPacker.d”
这个软件我用得好好的,为什么呢?我的瑞星版本为2010版 22.00.02.96
附上Virustotal 的结果,6款软件判断有问题:


引用:
File TeraCopy.exe received on 2010.02.02 16:34:12 (UTC)
Current status: finished
Result: 6/40 (15.00%)


Compact
Print results




AntivirusVersionLast UpdateResult
a-squared4.5.0.502010.02.02-
AhnLab-V35.0.0.22010.02.01-
AntiVir7.9.1.1562010.02.02-
Antiy-AVL2.0.3.72010.02.02-
Authentium5.2.0.52010.02.02W32/Heuristic-210!Eldorado
Avast4.8.1351.02010.02.02-
AVG9.0.0.7302010.02.02-
BitDefender7.22010.02.02-
CAT-QuickHeal10.002010.02.02(Suspicious) - DNAScan
ClamAV0.96.0.0-git2010.02.02-
Comodo37942010.02.02-
DrWeb5.0.1.122222010.02.02-
eSafe7.0.17.02010.02.02-
eTrust-Vet35.2.72762010.02.02-
F-Prot4.5.1.852010.02.01W32/Heuristic-210!Eldorado
F-Secure9.0.15370.02010.02.02-
Fortinet4.0.14.02010.02.02-
GData192010.02.02-
IkarusT3.1.1.80.02010.02.02-
Jiangmin13.0.9002010.02.02-
K7AntiVirus7.10.9632010.02.02-
Kaspersky7.0.0.1252010.02.02-
McAfee58792010.02.01-
McAfee+Artemis58792010.02.01Artemis!65C4771ACC2E
McAfee-GW-Edition6.8.52010.02.02Heuristic.LooksLike.Win32.Suspicious.K!89
Microsoft1.54062010.02.02-
NOD3248282010.02.02-
Norman6.04.032010.02.02-
nProtect2009.1.8.02010.02.02-
Panda10.0.2.22010.02.02-
PCTools7.0.3.52010.02.02-
Prevx3.02010.02.02-
Rising22.33.01.042010.02.02Packer.Win32.UnkPacker.d
Sophos4.50.02010.02.02-
Sunbelt3.2.1858.22010.02.02-
TheHacker6.5.1.0.1762010.02.02-
TrendMicro9.120.0.10042010.02.02-
VBA323.12.12.12010.02.02-
ViRobot2010.2.2.21682010.02.02-
VirusBuster5.0.21.02010.02.02-
Additional information
File size: 957952 bytes
MD5  : 65c4771acc2e1b4b761d8518596acc10
SHA1  : 9f925a384ef9c8a721efc193bbb7911af012522b
SHA256: 0ebc770faefd76f0b8f44f5e9b6f641e72a6d46af840f7f35a8a5e0783fe8537
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x119000
timedatestamp.....: 0x2A425E19 (Sat Jun 20 00:22:17 1992)
machinetype.......: 0x14C (Intel I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
0x1000 0xE2000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
0xE3000 0x1000 0x200 2.13 1b6cb2e05ff6f2080e7ff6bd225a89b8
.rsrc 0xE4000 0x33000 0x32300 4.21 d671c7b2ceeeee493e21536561e6feb4
0x117000 0x1000 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b
0x118000 0x1000 0x18 1.44 0d63af0ace18f890fe7844d79c7fc7cf
0x119000 0xD000 0xC600 7.98 6429d8040c3ed87290030197ab4e6838

( 3 imports )

> comctl32.dll: InitCommonControls
> kernel32.dll: ExitProcess
> user32.dll: MessageBoxA

( 0 exports )
TrID  : File type identification
Win32 Executable Generic (58.3%)
Win16/32 Executable Delphi generic (14.1%)
Generic Win/DOS Executable (13.7%)
DOS Executable Generic (13.6%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: 24576:gFVe84ggoZpus/gSTUeAOEkLWfiIW/79:YU845sBdE2WfXW
PEiD  : -
packers (F-Prot): Obsidium
packers (Authentium): Obsidium
RDS  : NSRL Reference Data Set
-




求真相!!

用户系统信息:Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1;  Embedded Web Browser from: http://bsalsa.com/; .NET CLR 2.0.50727; CIBA; 360SE)
is狐狸吖 - 2010-2-3 18:58:00
可疑文件不代表是病毒,杀到可疑文件不必再做其他操作,程序自动上报判定。
cagen - 2010-2-3 19:14:00
那么我现在扫描结束后,是否要“手动删除可疑文件”呢?
如果不选择,是否会有潜在危害?
cfasfasf - 2010-2-3 20:18:00
该用户帖子内容已被屏蔽
cfasfasf - 2010-2-3 20:18:00
该用户帖子内容已被屏蔽
帅乖 - 2010-2-3 21:51:00
如果你认为是正常文件就不用理会,自动上报瑞星“云安全”后,如果是病毒,瑞星是会更新病毒库的,你再扫描这个文件病毒就会被清理掉
1輩吇筷楽 - 2010-2-4 11:53:00
可以在http://mailcenter.rising.com.cn/FileCheck/可疑文件上报中上报
cagen - 2010-2-4 17:26:00
谢了,可疑文件上传后已经判断为安全的了,希望瑞星尽快更新病毒库~~
1
查看完整版本: 瑞星把Teracopy判断为病毒?