3

tonger2003

欠妳緈諨

:\virus\桌面.rar:\~tmp2112.exe - 可疑代码段 被发现 (Level: 5)
D:\virus\桌面.rar:\~tmp2700.exe - 可疑代码段 被发现 (Level: 5)
D:\virus\桌面.rar:\~tmp3322.exe - 可疑代码段 被发现 (Level: 5)
D:\virus\桌面.rar

        4 文件被扫描
          (1 压缩档 3 文件)
        0 特征码被侦测
        3 可疑代码段被发现
        耗时: 0:05.657

The EQs

三个的MD5是一样的

palfan

Begin scan in 'H:\Virus\桌面'
H:\Virus\桌面\~tmp2112.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48b06663.qua'!
H:\Virus\桌面\~tmp2700.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '492ca6b4.qua'!
H:\Virus\桌面\~tmp3322.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48b06664.qua'!

eav飘了
dr web
~tmp2112.exe;C:\Documents and Settings\sky\桌面\桌面;可能 MULDROP.Trojan;;
~tmp2700.exe;C:\Documents and Settings\sky\桌面\桌面;可能 MULDROP.Trojan;;
~tmp3322.exe;C:\Documents and Settings\sky\桌面\桌面;可能 MULDROP.Trojan;;

palfan

所以我刚才上报红伞的时候，只显示有一个文件

电影结束了

病毒: Dropped:Generic.Malware.P!BdldPk!g.6E12EB6B (BD 引擎)

全是这个。。。

Palkia

C:\Documents and Settings\Administrator\桌面\桌面.rar>>~tmp2112.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\桌面.rar>>~tmp2700.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\桌面.rar>>~tmp3322.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理

Dirk

f-prot

尽在不言中

[:1:] [:1:]