[MD5: EB7423]（刚才发错了文件 现在更新了）

傻猪猪米走鸡

不知道新文件运行报不？？nod“报壳”……

The EQs

对LS的无语ing。。。。nod32根本就不报。。。

coppola

D:\Downloads\样本.rar\SMS.EXE\SMS.EXE        PWS-QQPass(Trojan)
mcafee
晕

solcroft

好熟眼的老家伙

Redevil

楼主用的是哪的多引擎啊

a256886572008

運行sms.exe，發現下列行為，被EQ-Secure RC4攔截！

2007-07-12 16:01:51    创建文件      操作:允许
进程路径:D:\桌面\virus\EB7423\sms.exe
文件路径:C:\Documents and Settings\Hung  Jui Hung\Application Data\Sandbox\DefaultBox\drive\C\Program Files\Common Files\Microsoft Shared\MSINFO\System16.jup
触发规则:所有程序规则->保護安全軟體->C:\Documents and Settings\Hung  Jui Hung\Application Data\Sandbox\DefaultBox\*


2007-07-12 16:01:51    创建文件      操作:允许
进程路径:D:\桌面\virus\EB7423\sms.exe
文件路径:C:\Documents and Settings\Hung  Jui Hung\Application Data\Sandbox\DefaultBox\drive\C\Program Files\Common Files\Microsoft Shared\MSINFO\System16.ins
触发规则:所有程序规则->保護安全軟體->C:\Documents and Settings\Hung  Jui Hung\Application Data\Sandbox\DefaultBox\*

1.他會在C\Program Files\Common Files\Microsoft Shared\MSINFO\生成
   System16.jup
   System16.ins

scottxzt

样本.rar\sms.exe;D:\Documents and Settings\dell\桌面\样本.rar;Trojan.PWS.Gamania.origin;;
样本.rar;D:\Documents and Settings\dell\桌面;Archive contains infected objects;;

[ 本帖最后由 scottxzt 于 2007-7-12 16:16 编辑 ]

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Generic.PWStealer.51463B6B

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> sms.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27693
      [INFO]      The file was deleted!

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\样本.rar
>>>C:\Documents and Settings\Administrator\桌面\样本.rar\sms.exe infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 23 Kb/s
Scan time: 00:00:00