553CAF

tonger2003

jimmyleo

D:\download\t3\2.rar:\QIgKomU.com - Signature 'Trojan-PWS.Win32.Nilage.bga' found
D:\download\t3\2.rar

        2 Files scanned
          (1 Archive with 1 file)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.401

Lastone~睡觉去~

yashoo

LS的神速啊，咖啡不报。。。

The EQs

nod32 pass

Nblock

微点行为识别发现新的木马软件 是否删除/

1p1

squared 3.0.0.123 2007.07.25 2007-07-25 没有检测到病毒 4.465
Arcavir 1.0.4 200707261220 2007-07-26 没有检测到病毒 1.176
AVAST 1.0.8 000760-3 2007-07-26 Win32:QQPass-LV 1.535
AVG 7.5.47.442 269.10.20/919 2007-07-26 没有检测到病毒 1.254
BitDefender 7.60825.702163 7.14039 2007-07-27 DeepScan:Generic.PWStealer.17F... 2.536
CA (VET) 8.4.0.24 31.1.5004 2007-07-25 Win32/Dowque!generic trojan.  0.899
ClamAV  0.91.1 3776 2007-07-27 没有检测到病毒 0.084
ewido 4.0.0.2 2007.07.25 2007-07-25 没有检测到病毒 1.985
F-SECURE 5.51.6100 2007.07.26.05 2007-07-26 没有检测到病毒 2.361
IKARUS T3.1.1.8 04:28:06 2007-07-26 没有检测到病毒 1.263
MKS_VIR 2.01 2007.07.26 2007-07-26 没有检测到病毒 0.18
NOD32 2.70.7 2423 2007-07-26 没有检测到病毒 1.358
SOPHOS 2.47 4.19 2007-07-26 没有检测到病毒 0.085
VBA32 3.12.2.1 20070724.1915 2007-07-24 MalwareScope.Trojan-PSW.Game.7 0.867
VirusBuster 4.3.19:9 9.091.2/11.0 2007-07-26 没有检测到病毒 0.958
冰岛杀毒 3.16.15 2007.07.25 2007-07-25 没有检测到病毒 0.418
卡巴斯基 5.5.10 2007.07.26 2007-07-26 没有检测到病毒 0.05
大蜘蛛 4.33 2007.07.26 2007-07-26 Trojan.PWS.Qqpass.1121 4.573
小红伞 7.4.0.50 6.39.0.188 2007-07-26 TR/PSW.Steal.44655 2.11
熊猫卫士 9.00.00 2007.07.25 2007-07-25 Suspicious file 3.882
诺曼 5.90.37 5.90 2007-07-26 没有检测到病毒 2.906
赛门铁克 1.3.0.24 20070725.023 2007-07-25 W32.Gammima 0.181
趋势 8.500-1001 4.617.00 2007-07-25 没有检测到病毒 0.044
迈克菲 5.1.00 5083 2007-07-26 没有检测到病毒 0.708
金山毒霸 2007.6.20.249 2007.7.26 2007-07-26 没有检测到病毒

woai_jolin

fscs沒有報

1688388728

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\SANDBOX\DEFAULTBOX\DRIVE\C\病毒库\样本\QIGKOMU.COM
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\SANDBOX\DEFAULTBOX\DRIVE\D\SYSAUTO.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\SANDBOX\DEFAULTBOX\DRIVE\C\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSTEM64.JMP
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\SANDBOX\DEFAULTBOX\DRIVE\C\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSTEM64.AAA
是否删除木马程序及其衍生物?

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Generic.PWStealer.F65D3A86

lsyer

--> QIgKomU.com
      [DETECTION] Is the Trojan horse TR/PSW.Steal.31343
      [INFO]      The file was deleted!