盗QQ游戏的MD5: 59B4FB

显示全部楼层 · 发表于 2007-7-11 01:19:29

咖啡挂了

显示全部楼层 · 发表于 2007-7-11 01:21:29

红伞启发

显示全部楼层 · 发表于 2007-7-11 01:23:35

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=99302 is infected with Trojan.Generic virus

显示全部楼层 · 发表于 2007-7-11 01:29:17

"The application ""mm.exe"" is trying
to change the registration database.

Would you like to accept the changes?

Entry: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Key: kav

Information:
This entry contains a new application which will run when the system is booted up."

病毒: Trojan-PSW.Win32.QQGame.j
文件: check.dll
目录: C:\WINDOWS\system32
进程: mm.exe

显示全部楼层 · 发表于 2007-7-11 01:42:36

两个生成物杀了一个
剩下一个连同母体上报

显示全部楼层 · 发表于 2007-7-11 02:13:27

好东西啊!

显示全部楼层 · 发表于 2007-7-11 04:14:44

费尔启发。

显示全部楼层 · 发表于 2007-7-11 07:24:56

原帖由 wudanbuhuan 于 2007-7-11 01:21 发表
红伞启发

Starting the file scan:
Begin scan in 'F:\病毒样本\mm.rar'
F:\病毒样本\mm.rar
  [0] Archive type: RAR
  --> mm.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-11 07:48:24

[病毒样本] 盗QQ游戏的MD5: 59B4FB

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源