微点交流论坛 - 微点主动防御软件 - 请问是不是微点误报？

» 游客: 注册 | 登录 | 帮助

微点交流论坛 » 微点主动防御软件 » 请问是不是微点误报？

yeahwsw
中级用户

积分 243
发帖 241
注册 2009-12-6

#1 请问是不是微点误报？

以前装卡巴是玩赖子山庄，从来没有检测出病毒、木马或者可疑文件之类的
今天换了微点，问题就来了，如图

微点木马日志内容如下：
时间处理结果木马名称木马进程名木马文件创建者
2010-03-13 17:26:58 用户取消未知后门程序 D:\TOOLS\赖子山庄\LAIZI.EXE C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\ENGINE\6\INTEL 32\IKERNEL.EXE
XC5M32

http://zhongguoren.cn/在线杀毒结果：
文件 IKernel.exe 接收于 2010.03.06 19:13:32 (UTC)
当前状态: 完成
结果: 0/42 (0.00%)
格式化文本打印结果
反病毒引擎版本最后更新扫描结果
a-squared 4.5.0.50 2010.03.06 -
AhnLab-V3 5.0.0.2 2010.03.06 -
AntiVir 8.2.1.180 2010.03.05 -
Antiy-AVL 2.0.3.7 2010.03.05 -
Authentium 5.2.0.5 2010.03.06 -
Avast 4.8.1351.0 2010.03.06 -
Avast5 5.0.332.0 2010.03.06 -
AVG 9.0.0.787 2010.03.06 -
BitDefender 7.2 2010.03.06 -
CAT-QuickHeal 10.00 2010.03.06 -
ClamAV 0.96.0.0-git 2010.03.06 -
Comodo 4091 2010.02.28 -
DrWeb 5.0.1.12222 2010.03.06 -
eSafe 7.0.17.0 2010.03.04 -
eTrust-Vet 35.2.7342 2010.03.05 -
F-Prot 4.5.1.85 2010.03.06 -
F-Secure 9.0.15370.0 2010.03.06 -
Fortinet 4.0.14.0 2010.03.06 -
GData 19 2010.03.06 -
Ikarus T3.1.1.80.0 2010.03.06 -
Jiangmin 13.0.900 2010.03.06 -
K7AntiVirus 7.10.990 2010.03.04 -
Kaspersky 7.0.0.125 2010.03.06 -
McAfee 5912 2010.03.06 -
McAfee+Artemis 5912 2010.03.06 -
McAfee-GW-Edition 6.8.5 2010.03.06 -
Microsoft 1.5502 2010.03.06 -
NOD32 4921 2010.03.06 -
Norman 6.04.08 2010.03.06 -
nProtect 2009.1.8.0 2010.03.06 -
Panda 10.0.2.2 2010.03.06 -
PCTools 7.0.3.5 2010.03.04 -
Prevx 3.0 2010.03.06 -
Rising 22.37.05.03 2010.03.06 -
Sophos 4.51.0 2010.03.06 -
Sunbelt 5772 2010.03.06 -
Symantec 20091.2.0.41 2010.03.06 -
TheHacker 6.5.1.9.222 2010.03.06 -
TrendMicro 9.120.0.1004 2010.03.06 -
VBA32 3.12.12.2 2010.03.05 -
ViRobot 2010.3.5.2214 2010.03.05 -
VirusBuster 5.0.27.0 2010.03.05 -
附加信息
File size: 614532 bytes
MD5 : b3fd01873bd5fd163ab465779271c58f
SHA1  : e1ff9981a09ab025d69ac891bfc931a776294d4d
SHA256: 985eb55ecb750da812876b8569d5f1999a30a24bcc54f9bab4d3fc44dfedb931
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x5D5CC
timedatestamp.....: 0x3D40686C (Thu Jul 25 23:06:52 2002)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x6AF5A 0x6B000 6.55 b5ebca1ecda0467ca0b1c78c29b1a220
.rdata 0x6C000 0x15460 0x16000 3.97 ccc0338aa5e2ed469fff739219309025
.data 0x82000 0x1A85C 0x5000 4.08 3e0a25e16a8261ab9e87d5d4ac52abf0
.rsrc 0x9D000 0xE188 0xF000 4.88 214bfd12a06d70728e498b886610d9ea

( 0 imports )

( 0 exports )

TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (53.1%)
Windows Screen Saver (18.4%)
Win32 Executable Generic (12.0%)
Win32 Dynamic Link Library (generic) (10.6%)
Generic Win/DOS Executable (2.8%)
ThreatExpert: http://www.threatexpert.com/repo ... d163ab465779271c58f
ssdeep: 6144:cTqa+rypBCk+Fx7/BCttXXikQklSn8nbFpBJkCcjalJ/M6HnpJpaijgBwTFg56lX:fr/SlSBUJjnNRjpTWamB4
sigcheck: publisher....: InstallShield Software Corporation
copyright....: Copyright (C) 1990-2001 InstallShield Software Corporation
product......: InstallShield (R)
description..: InstallShield (R) Setup Engine
original name: iKernel.exe
internal name: Kernel
file version.: 6, 31, 100, 1221
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

PEiD  : Armadillo v1.71
RDS : NSRL Reference Data Set

( Freedom Scientific )

JAWS for Windows 7.0: ikernel.exe
( Broderbund Software Inc )

Family Lawyer Will Writer: ikernel.exeGreeting Cards: ikernel.exeIdentity Theft Protector: ikernel.exePrint Master Platinum Version 18: ikernel.exe
( Her Interactive )

Nancy Drew Secret of the Scarlet Hand Mystery 6: ikernel.exe
( Electronic Arts Ltd )

Tiger Woods PGA Tour: ikernel.exe
( Roxio Inc. )

Roxio Easy Media Creator 7: ikernel.exe
( Boomerang Software )

Guardian Antispy: ikernel.exeGuardian Data Backup: ikernel.exeGuardian Data Encryptor and Protector: ikernel.exeGuardian Data Encryptor and Protector: ikernel.exeGuardian Download Manager Cookie Manager Traffic Manager: ikernel.exeGuardian Download Monitor Cookie Manager Traffic Manager: ikernel.exeGuardian Parental Control and Web Filtering: ikernel.exeGuardian PC Cleaner: ikernel.exe
( ValuSoft )

Office Suite 2007: ikernel.exeUltimate Sudoku Deluxe: ikernel.exe
( Logitech )

MouseWare 9.79.1/9.73.1: ikernel.exe
( Bold Games )

Wings Over Vietnam: ikernel.exe
( Corel Corporation )

Corel WordPerfect Office X3 Home Edition: ikernel.exeCorel WordPerfect Office X3 Professional Edition: ikernel.exeCorel WordPerfect Office X3 Standard Edition: ikernel.exe
( Topics Entertainment )

SAT ACT PSAT 2007 Platinum Edition: ikernel.exe
( Dolphin Computer Access Ltd. )

Super Nova Reader Magnifier: ikernel.exe
( Pinnacle Systems )

Instant Copy: ikernel.exePinnacle Expression: ikernel.exe
( Panda Software )

Platinum 2005 Internet Security: ikernel.exeTitanium 2005 Antivirus: ikernel.exe
( Ai Squared )

ZoomText Version 9.02: ikernel.exe
( Allume Systems )

Aquazone Desktop Garden: ikernel.exe
( Atari )

Dora the Explorer Fairytale Adventure: ikernel.exe
( Encore Software Inc. )

High School Advantage 2008: ikernel.exeMavis Beacon Teaches Typing Deluxe Version 17: ikernel.exeMiddle School Advantage 2008: ikernel.exe
( Cosmi Corporation )

Wi-Fi Security Suite: ikernel.exe
( BHV Software )

PC Aquarium Deluxe 3.0: ikernel.exe
( InterVideo )

WinDVD: ikernel.exeWinDVD Player: ikernel.exe
( LucasArts Entertainment Company LLC. )

Star Wars Knights of the Old Republic: ikernel.exe
( AccessData )

AccessData Ultimate Toolkit Demo: ikernel.exeDistributed Network Attack: ikernel.exeForensic Toolkit: ikernel.exePassword Recovery Toolkit: ikernel.exePassword Recovery Toolkit Professional: ikernel.exeRegistry Viewer: ikernel.exe
( Dragon Systems )

Dragon Naturally Speaking 9: ikernel.exeDragon Naturally Speaking 9 Preferred: ikernel.exe
( Scholastic )

Brain Play Preschool-1st Grade: ikernel.exeClifford Phonics: ikernel.exe
( SmithMicro Software )

Aquazone 2 Oceans of the World: ikernel.exeAquazone 2 Open Water: ikernel.exe
( Avanquest USA )

System Suite: ikernel.exe
( Gateway )

Gateway Power DVD 2 Channel: ikernel.exe
( UBI Soft Entertainment )

Might and Magic Heroes V Tribes of the East: ikernel.exe
( My Software Company )

MyLabels Premium: ikernel.exe

注意: VirusTotal 是 Hispasec Sistemas 提供的免费服务. 我们不保证任何该服务的可用性和持续性. 尽管使用多种反病毒引擎所提供的检测率优于使用单一产品, 但这些结果并不保证文件无害. 目前来说, 没有任何一种解决方案可以提供 100% 的病毒和恶意软件检测率. 如果您购买了一款声称具有此能力的产品, 那么您可能已经成为受害者.

※ ※ ※ 本文纯属【yeahwsw】个人意见，与【微点交流论坛】立场无关※ ※ ※

2010-3-13 17:58

Legend
超级版主

超级版主

积分 77171
发帖 70170
注册 2005-10-29

#2

感谢楼主的反馈
请楼主将微点报警文件或者下载链接和微点技术支持信息导出（微点主界面----辅助功能----生成技术支持信息）发送到support@micropoint.com.cn 发送时请附带本贴链接，我们将尽快分析后给您答复。

※文章所有权归【Legend】与【东方微点论坛】共同所有，转载请注明出处！※

微点官方认证新浪微博：欢迎进入微点新浪微博
微点技术支持邮箱: support@micropoint.com.cn
给Legend发短消息

2010-3-13 18:01

Legend
超级版主

超级版主

积分 77171
发帖 70170
注册 2005-10-29

#3

楼主您好！您所反馈的问题已经解决，请您等待微点更新。在此期间给您带来的不便还请您谅解。
此主题暂做关闭主题处理，如有其他的问题，请另开新帖讨论。

※文章所有权归【Legend】与【东方微点论坛】共同所有，转载请注明出处！※

微点官方认证新浪微博：欢迎进入微点新浪微博
微点技术支持邮箱: support@micropoint.com.cn
给Legend发短消息

2010-3-18 12:14

论坛跳转:

可打印版本 | 推荐 | 订阅 | 收藏

[ 联系我们 - 东方微点 ] 北京东方微点信息技术有限责任公司福建东方微点信息安全有限责任公司闽ICP备05030815号