[893184]今天某东西生成的样本

promised

tracydk

aerbeisi

detected: riskware Invader        Running process: QQsee.exe

创建了一个dll

扫描开始时间: 2007-7-25 18:14:21
扫描日志
NOD32 版本 2418 (20070725) NT
命令行: F:\virus\QQsee.zip

日期: 2007年7月25日  时间: 18:14:22
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\QQsee.zip
F:\virus\QQsee.zip ?ZIP ?QQsee.exe<病毒 - 可能是 Win32/PSW.QQShou 木马 变种>
已扫描文件数量: 1
已发现病毒数量: 1
完成时间: 18:14:23 总共扫描时间: 1 秒 (00:00:01)

snakebone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\QQsee.zip'
C:\Documents and Settings\Administrator\桌面\
  QQsee.zip
    [0] Archive type: ZIP
    --> QQsee.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '471a240c.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

红心王子

不杀 上报

Scan taken on 25 Jul 2007 10:22:00 (GMT)
A-Squared	Found nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found nothing
Avast	Found Win32:Delf-CSQ
AVG Antivirus	Found PSW.Generic4.AALC
BitDefender	Found Generic.PWStealer.31779BFB
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found DLOADER.Trojan (probable variant)
F-Prot Antivirus	Found W32/Downloader.gen10
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably a variant of Win32/PSW.QQShou (probable variant)
Norman Virus Control	Found W32/Suspicious_U.gen
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/Packer
VirusBuster	Found Packed/Upack
VBA32	Found MalwareScope.Trojan-PSW.Game.7

woai_jolin

aerbeisi

detected: Trojan program Trojan-PSW.Win32.QQPass.xo        File: QQsee.zip/QQsee.exe//UPack

微点卫士

金山挂,费尔启发报1个

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.735\QQSEE.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?

woai_jolin