Архив прикрепить можно. Но как выяснилось поблема гораздо сложнее
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
/opt/viruses11/GOLDBUG.COM - Ok
Scanned objects: 8605, scan errors: 3, threats found: 7268, threats neutralized: 0.
Scanned 9431.04 KB in 42.01 s with speed 224.52 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
Threat #2028: Ctl-1281: "/opt/viruses11/GOLDBUG.COM" - GoldBug
/opt/viruses11/GOLDBUG.COM - infected with GoldBug
Scanned objects: 8605, scan errors: 3, threats found: 7269, threats neutralized: 0.
Scanned 9431.04 KB in 43.24 s with speed 218.13 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
Threat #2028: Ctl-1310: "/opt/viruses11/GOLDBUG.COM" - GoldBug
/opt/viruses11/GOLDBUG.COM - infected with GoldBug
Scanned objects: 8605, scan errors: 3, threats found: 7269, threats neutralized: 0.
Scanned 9431.04 KB in 43.83 s with speed 215.18 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
/opt/viruses11/GOLDBUG.COM - Ok
Scanned objects: 8605, scan errors: 3, threats found: 7268, threats neutralized: 0.
Scanned 9431.04 KB in 44.42 s with speed 212.32 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
/opt/viruses11/GOLDBUG.COM - Ok
Scanned objects: 8605, scan errors: 3, threats found: 7268, threats neutralized: 0.
Scanned 9431.04 KB in 41.08 s with speed 229.58 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
/opt/viruses11/GOLDBUG.COM - Ok
Scanned objects: 8605, scan errors: 3, threats found: 7268, threats neutralized: 0.
Scanned 9431.04 KB in 39.17 s with speed 240.78 KB/s.
[root@Haba_BSD /opt/drweb.com/bin]# ./drweb-ctl.real scan -a --ScanTimeout 0 --HeuristicAnalysis On /opt/viruses11 | grep -E 'GOLDBUG|Scanned'; echo
Threat #2029: Ctl-1437: "/opt/viruses11/GOLDBUG.COM" - GoldBug
/opt/viruses11/GOLDBUG.COM - infected with GoldBug
Scanned objects: 8605, scan errors: 3, threats found: 7269, threats neutralized: 0.
Scanned 9431.04 KB in 41.51 s with speed 227.21 KB/s.
Результат стабилен на нескольких машинах
При этом проверка только одного файла GOLDBUG.COM стабильно дает infected