两个[C046A6 524CF7]

显示全部楼层 · 发表于 2007-7-18 21:36:46

费尔过。

显示全部楼层 · 发表于 2007-7-18 21:38:06

Starting the file scan:

Begin scan in 'F:\病毒样本\MSINFO.rar'
F:\病毒样本\MSINFO.rar
  [0] Archive type: RAR
  --> System16.jup
   [DETECTION] Is the Trojan horse TR/PSW.Steal.27673
  --> System16.ins
   [DETECTION] Is the Trojan horse TR/PSW.Steal.27673
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-18 21:38:16

detected: virus Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\MSINFO.rar/System16.jup

Hello,

System16.ins - Trojan-PSW.Win32.Delf.qc,
System16.jup - Trojan-Spy.Win32.Delf.vr

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: MSINFO.zip

[ 本帖最后由 wangjay1980 于 2007-7-18 22:15 编辑 ]

显示全部楼层 · 发表于 2007-7-18 21:38:27

nod32也不杀

显示全部楼层 · 发表于 2007-7-18 21:39:10

F:\MSINFO.rar:<RAR>\System16.jup : infected MalwareScope.Trojan-PSW.Game.7
F:\MSINFO.rar:<RAR>\System16.ins : infected MalwareScope.Trojan-PSW.Game.15

显示全部楼层 · 发表于 2007-7-18 21:46:44

看到红伞报的就知道nod32 ps了..

显示全部楼层 · 发表于 2007-7-18 21:49:05

这个是更新的?..记得这个System16.ins被挂全局钩子.

显示全部楼层 · 发表于 2007-7-18 21:53:12

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQPass.qmw
病毒： Trojan.PSW.Win32.QQPass.qmw

用户来源：互联网

软件版本：19.32.22

显示全部楼层 · 发表于 2007-7-18 21:57:40

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR\MSINFO[1].rar\System16.jup - infected with BINARYRES
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR\MSINFO[1].rar\System16.ins - infected with Trojan.PWS.Gamania.origin

Archive contains 2 infected items

[病毒样本] 两个[C046A6 524CF7]

本帖子中包含更多资源