来个玩玩~~~~~~~~~~~~~

dreams521

saga3721

DR/Bear.303354' [dropper]

西风萧雨

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\1.rar'
C:\Documents and Settings\tim\桌面\1.rar
    [0] Archive type: RAR
    --> 1.exe
      [DETECTION] Contains recognition pattern of the DR/Bear.303354 dropper
    [NOTE]      A backup was created as '49c38d3e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'C:\Documents and Settings\tim\桌面\恶作剧非病毒.rar'
C:\Documents and Settings\tim\桌面\恶作剧非病毒.rar
    [0] Archive type: RAR
      --> ﾶ￱ￗ￷ﾾ￧ﾲﾡﾶﾾ.exe
        [1] Archive type: RAR SFX (self extracting)
        --> 2.exe
          [2] Archive type: RAR SFX (self extracting)
          --> 1.exe
            [3] Archive type: RAR SFX (self extracting)
            --> 1.exe
              [DETECTION] Contains recognition pattern of the DR/Bear.303354 dropper
    [NOTE]      A backup was created as '9bb8dc6c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

su-tt

ESS无视

250662772

那个恶作剧不玩了，我EQ没设置阻止桌面创建快捷方式

allinwonderi

to Norman

The EQs

记得这个好像很早之前就发过了。。。。卡巴不认为含有恶意代码

xyc529

我解压后微点没反应，要运行后才发现已知木马删除。可是在桌面生成很多没用的图标，要手工删除，另外我的系统是VISTASP1，打所有系统补丁，装红伞微点双监控，这是在关闭红伞监控下测试的！！

Darrows

Filename	Result
1.exe	MALWARE

The file '1.exe' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Bear.303354. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.00.07.64.