2008.08.14 05:04:43
http://www.virustotal.com/analis ... f3d7b02207131e3db07
當時有10家
AntiVirus 發現可疑威脅
分別是:
Avira Worm/Brontok.DO
Avast Win32:Trojan-gen {Other}
F-Secure Email-Worm.Win32.Brontok.do
Fortinet W32/Brontok.DO@mm
GData Email-Worm.Win32.Brontok.do
Ikarus Email-Worm.Win32.Brontok.do
Kaspersky Email-Worm.Win32.Brontok.do
Prevx1 Worm
ViRobot I-Worm.Win32.Brontok.163840
Webwasher-Gateway Worm.Brontok.DO
2008.08.16 08:49:02
http://www.virustotal.com/zh-tw/ ... 4b3d31d12a5c39fbaee
目前有10家 AntiVirus 發現可疑威脅
分別是:
Avira Worm/Brontok.DO
Avast Win32:Trojan-gen {Other}
Fortinet W32/Brontok.DO@mm
GData Win32:Trojan-gen
Ikarus Email-Worm.Win32.Brontok.do
Norman W32/Rontokbro.GHE
Prevx1 Worm
Sunbelt Email-Worm.Win32.Brontok.do
VBA32 Email-Worm.Win32.Brontok.do
Webwasher-Gateway Worm.Brontok.DO
相隔2天發現一個現象
維持警報:
Avira Worm/Brontok.DO
Avast Win32:Trojan-gen {Other}
Fortinet W32/Brontok.DO@mm
Ikarus Email-Worm.Win32.Brontok.do
Prevx1 Worm
Webwasher-Gateway Worm.Brontok.DO
新增警報:
Norman W32/Rontokbro.GHE
Sunbelt Email-Worm.Win32.Brontok.do
VBA32 Email-Worm.Win32.Brontok.do
取消警報:
*F-Secure Email-Worm.Win32.Brontok.do
*GData Email-Worm.Win32.Brontok.do
*Kaspersky Email-Worm.Win32.Brontok.do
ViRobot I-Worm.Win32.Brontok.163840
*採用卡巴斯基 AVP引擎的廠商 已經不警報了
而 GData Email-Worm.Win32.Brontok.do (AVP引擎 改為不報)
GData Win32:Trojan-gen (另一個Avast引擎 警報!)
究竟是2天維持警報
小紅傘...等 誤報?
還是 取消警報
卡巴斯基...等 AVP引擎 誤報?
又或者 新增警報的Norman...等 誤報?
期待有高手能釋疑!!
