Promised qq.exe新壳

qwerasdf123

地球人都报了

lsyer

--> qq2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!

雨伞特长~

电影结束了

C:\Documents and Settings\wangcheng\桌面\qq2.rar\qq2.exe infected with BackDoor.Bifrost.78
DR.WEB.........................

1688388728

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=105043 is infected with Downloader virus

欠妳緈諨

The EQs

Scan performed at: 2007-7-25 23:10:43
Scanning Log
NOD32 version 2418 (20070725) NT
Command line: C:\Documents and Settings\EQ2\桌面\qq2.rar
Operating memory - is OK

Date: 25.7.2007  Time: 23:10:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\qq2.rar
C:\Documents and Settings\EQ2\桌面\qq2.rar ?RAR ?qq2.exe - probably a variant of Win32/PSW.Lineage.NEW trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:10:49 Total scanning time: 0 sec (00:00:00)

微点卫士

金山报,费尔报了壳+后门

微点:
木马名称:Trojan-PSW.Win32.QQPass.fdi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\QQ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\QQ2.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:3383
远端地址:61.172.202.46(上海)
远端端口:80
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\QQ2.EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\_XIARAN.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\QQ2.EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.282\_XIARAN.BAT
是否删除可疑程序?

taitan001

F:\qq2.rar:<RAR>\qq2.exe : is suspected of Trojan-PSW.Game.1 (paranoid heuristics)

chow2006

原帖由 微点卫士 于 2007-7-25 23:17 发表
金山报,费尔报了壳+后门

微点:
木马名称:Trojan-PSW.Win32.QQPass.fdi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\QQ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件? ...

我倒, 什么"壳+后门".

残缺的唯美

咖啡也报了