感觉是红伞误报

aaa5131421

这是穿越火线里面的一个文件。红伞报Contains suspicious code HEUR/Crypted
大家知道这是什么吗？排除他应该没什么问题吧？

aaad2008

英语解释

qq login

qq登录

sbbdms

估计是误报了

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.30.1	2008.06.05	-
AntiVir	7.8.0.26	2008.06.06	HEUR/Crypted
Authentium	5.1.0.4	2008.06.05	-
Avast	4.8.1195.0	2008.06.06	-
AVG	7.5.0.516	2008.06.05	-
BitDefender	7.2	2008.06.06	-
CAT-QuickHeal	9.50	2008.06.05	-
ClamAV	0.92.1	2008.06.06	-
DrWeb	4.44.0.09170	2008.06.05	-
eSafe	7.0.15.0	2008.06.05	-
eTrust-Vet	31.6.5850	2008.06.05	-
Ewido	4.0	2008.06.05	-
F-Prot	4.4.4.56	2008.06.05	-
F-Secure	6.70.13260.0	2008.06.05	-
Fortinet	3.14.0.0	2008.06.06	-
GData	2.0.7306.1023	2008.06.06	-
Ikarus	T3.1.1.26.0	2008.06.06	-
Kaspersky	7.0.0.125	2008.06.06	-
McAfee	5311	2008.06.05	-
Microsoft	1.3604	2008.06.06	-
NOD32v2	3162	2008.06.05	-
Norman	5.80.02	2008.06.05	-
Panda	9.0.0.4	2008.06.05	-
Prevx1	V2	2008.06.06	-
Rising	20.47.40.00	2008.06.06	-
Sophos	4.30.0	2008.06.06	Sus/ComPack-C
Sunbelt	3.0.1145.1	2008.06.05	-
Symantec	10	2008.06.06	-
TheHacker	6.2.92.337	2008.06.06	-
VBA32	3.12.6.7	2008.06.05	-
VirusBuster	4.3.26:9	2008.06.05	-
Webwasher-Gateway	6.6.2	2008.06.06	Heuristic.Crypted

dbpe

00023AD0   00423AD0      0   config\cfxml.htm
00023AE4   00423AE4      0   http://r2.qq.com/web200612/pay/pay.shtml
00023B10   00423B10      0   Button_Bill
00023B1C   00423B1C      0   http://r2.qq.com/a20061106bc/
00023B3C   00423B3C      0   Button_Prize
00023B4C   00423B4C      0   http://r2.qq.com/a20070521rw/
00023B6C   00423B6C      0   Button_Mission
00023B7C   00423B7C      0   http://r2.qq.com/seed5/
00023B94   00423B94      0   Button_Seed
00023BA0   00423BA0      0   http://r2.qq.com/vip/
00023BB8   00423BB8      0   Button_Vip
00023BC4   00423BC4      0   http://r2.qq.com/2006web/market/



应该是误报

sam.to

已上报红伞


The file 'QQLogin.exe' has been determined to be 'UNDER ANALYSIS'.

sam.to

The file 'QQLogin.exe' has been determined to be 'MALWARE'. Our analysts named the threat HEUR/Crypted. This malware is detected by a special detection routine from the engine module.

qigang

判定为：不是病毒也！