SOS...........!!!!avast!4.7误报警,严重错误!

[xiaomiejapan]

目前版本更新到2007-07-11,今天夜里发现QQ游戏不能玩了,前天还可以,肯定是误报警,我已经在多台电脑上边测试过!

[xiaochugang]

请将那个ＤＬＬ文件上传到www.virustotal.com 再把扫描结果贴出来...谢谢！
please upload that file which end of ***.dll to the www.virustotal.com
and then post the scan result here...thank you!

[xiaomiejapan]

总算在这里遇见一个中国人了。。。。

[Lisandro]

Well... it should be an English-only forum...
Could you please, go to an automated translation service, copy & paste your text and get, at least, an automated translation of your writings?
Thanks.

http://world.altavista.com/
http://dictionary.reference.com/translate/text.html
http://www.freetranslation.com/
http://www.worldlingo.com/en/products_services/worldlingo_translator.html
http://translation2.paralink.com/

[xiaomiejapan]

File QQGame.exe received on 07.12.2007 15:09:31 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Loading server information...
Your file is queued in position: 3.
Estimated start time is between 52 and 75 seconds.
Do not close the window untill scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Print results

Your file has expired or do not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
 Email: 
 

Antivirus Version Last Update Result
AhnLab-V3 2007.7.12.1 2007.07.12 no virus found
AntiVir 7.4.0.39 2007.07.12 no virus found
Authentium 4.93.8 2007.07.12 no virus found
Avast 4.7.997.0 2007.07.12 no virus found
AVG 7.5.0.476 2007.07.12 no virus found
BitDefender 7.2 2007.07.12 no virus found
CAT-QuickHeal 9.00 2007.07.12 no virus found
ClamAV devel-20070416 2007.07.12 no virus found
DrWeb 4.33 2007.07.12 no virus found
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3781 2007.07.12 no virus found
Ewido 4.0 2007.07.12 no virus found
FileAdvisor 1 2007.07.12 no virus found
Fortinet 2.91.0.0 2007.07.12 no virus found
F-Prot 4.3.2.48 2007.07.11 no virus found
Ikarus T3.1.1.8 2007.07.12 no virus found
Kaspersky 4.0.2.24 2007.07.12 no virus found
McAfee 5072 2007.07.11 no virus found
Microsoft 1.2704 2007.07.12 no virus found
NOD32v2 2395 2007.07.12 no virus found
Norman 5.80.02 2007.07.12 no virus found
Panda 9.0.0.4 2007.07.12 no virus found
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.12 no virus found
Symantec 10 2007.07.12 no virus found
TheHacker 6.1.6.145 2007.07.12 no virus found
VBA32 3.12.0.2 2007.07.12 no virus found
VirusBuster 4.3.23:9 2007.07.11 no virus found
Webwasher-Gateway 6.0.1 2007.07.12 no virus found
Aditional information
File size: 156739 bytes
MD5: 1eacc2e321a417fbf9bceb6c2b0d3312
SHA1: af6c562c6cac95eac3f7b1fb07a342971841e28a

[xiaomiejapan]

-----------------------------------
游戏名称： QQGame.exe(版本 20020111)
出错类型： EXCEPTION_ACCESS_VIOLATION
出错地址： 0x00B9E6F2
出错原因： 对 0x00000004 地址进行读取操作

出错过程：
0x00B70000[2E6F2] MainLogi.dll: (1319807,4206828,0,0)
0x00400000[1E65] QQGame.exe: (4194304,0,1319807,1)
0x00400000[207A] QQGame.exe: (3342389,3604535,2147344384,-2141930696)
0x7C800000[16FD7] kernel32.dll: RegisterWaitForInputIdle(4202310,0,2020893505,32)


模块及其加载地址列表:
-----------------------------------
[ 0x00400000 ] E:\Tencent\QQGame\QQGame.exe
[ 0x00B30000 ] E:\Tencent\QQGame\factory.dll
[ 0x00B50000 ] E:\Tencent\QQGame\Logic\UIStyle.dll
[ 0x00B70000 ] E:\Tencent\QQGame\Logic\MainLogi.dll
[ 0x00DE0000 ] E:\Tencent\QQGame\Res\ErrorDes.dll
[ 0x10000000 ] E:\Tencent\QQGame\HelpDll.dll
[ 0x50D00000 ] E:\Tencent\QQGame\ResEx.dll
[ 0x5ADC0000 ] C:\WINDOWS\system32\uxtheme.dll
[ 0x5D170000 ] C:\WINDOWS\system32\COMCTL32.dll
[ 0x5EFE0000 ] C:\WINDOWS\system32\OLEPRO32.DLL
[ 0x61BE0000 ] C:\WINDOWS\system32\MFC42LOC.DLL
[ 0x62C20000 ] C:\WINDOWS\system32\LPK.DLL
[ 0x65780000 ] C:\Program Files\Alwil Software\Avast4\AhJsctNs.dll
[ 0x68D60000 ] C:\WINDOWS\system32\DBGHELP.dll
[ 0x71A10000 ] C:\WINDOWS\system32\WS2HELP.dll
[ 0x71A20000 ] C:\WINDOWS\system32\WS2_32.dll
[ 0x73640000 ] C:\WINDOWS\system32\msctfime.ime
[ 0x73D30000 ] C:\WINDOWS\system32\MFC42.DLL
[ 0x73FA0000 ] C:\WINDOWS\system32\USP10.dll
[ 0x74680000 ] C:\WINDOWS\system32\MSCTF.dll
[ 0x75FF0000 ] C:\WINDOWS\system32\MSVCP60.dll
[ 0x76300000 ] C:\WINDOWS\system32\IMM32.DLL
[ 0x76990000 ] C:\WINDOWS\system32\ole32.dll
[ 0x76B10000 ] C:\WINDOWS\system32\WINMM.dll
[ 0x76C60000 ] C:\WINDOWS\system32\IMAGEHLP.dll
[ 0x770F0000 ] C:\WINDOWS\system32\OLEAUT32.dll
[ 0x77180000 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
[ 0x77BD0000 ] C:\WINDOWS\system32\VERSION.dll
[ 0x77BE0000 ] C:\WINDOWS\system32\msvcrt.dll
[ 0x77D10000 ] C:\WINDOWS\system32\USER32.dll
[ 0x77DA0000 ] C:\WINDOWS\system32\ADVAPI32.dll
[ 0x77E50000 ] C:\WINDOWS\system32\RPCRT4.dll
[ 0x77EF0000 ] C:\WINDOWS\system32\GDI32.dll
[ 0x77F40000 ] C:\WINDOWS\system32\SHLWAPI.dll
[ 0x7C800000 ] C:\WINDOWS\system32\kernel32.dll
[ 0x7C920000 ] C:\WINDOWS\system32\ntdll.dll
[ 0x7D590000 ] C:\WINDOWS\system32\SHELL32.dll
___________________________________

[xiaochugang]

tech ,I think isn`t a virus at not .
maybe the Alwil team should update it`s virus sample to solve this problem ....
and xiaomiejapan said:
At present the edition renews to 2007-07-11, today night discovered the QQ game could not play, day before yesterday was alright, definitely to be reports to the police by mistake, I already have tested above many computers!
translated by http://world.altavista.com/tr

[rtyuiop]

一样问题，急盼解决。

[Lisandro]

tech ,I think isn`t a virus at not.

This link is a tutorial on how to help correct a virus detection that you believe to be false:
http://forum.avast.com/index.php?topic=25009.msg204838#msg204838

To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com
Please, mention in the body of the message why you think it is a false positive and the password used. Thanks.

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be carefull, you should 'exclude' that many files that let your system in danger.