[c32722]QQpsw……

显示全部楼层 · 发表于 2007-7-30 16:03:10

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TY.rar'
C:\Documents and Settings\Administrator\桌面\
  TY.rar
[0] Archive type: RAR
--> TY.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.OF.3
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46db9ba0.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-30 16:04:04

显示全部楼层 · 发表于 2007-7-30 16:04:24

Scan performed at: 2007-7-30 16:03:49
Scanning Log
NOD32 version 2428 (20070730) NT
Command line: C:\Documents and Settings\wangcheng\桌面\TY.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 30.7.2007 Time: 16:03:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\TY.rar
C:\Documents and Settings\wangcheng\桌面\TY.rar ?RAR ?TY.exe - Win32/PSW.QQPass.PB trojan
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 16:03:54 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2007-7-30 16:08:59

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.QQPass.qot

MAC地址：00:0E:A6:38:EF:31

用户来源：互联网

软件版本：19.34.01

显示全部楼层 · 发表于 2007-7-30 16:09:23

del TY.exe
del %0
释放一个东西到outlook目录就没有其他动作了没有启动项生成
微点没报

显示全部楼层 · 发表于 2007-7-30 16:10:12

EQ.......就一条....

2007-07-30 16:09:15 文件保护(创建文件) 操作:阻止
进程路径:C:\Documents and Settings\wangcheng\桌面\TY.exe
文件路径:C:\Program Files\Outlook Express\newqq.dll

显示全部楼层 · 发表于 2007-7-30 16:10:27

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q\TY[1].rar\TY.exe - infected with Trojan.PWS.Qqpass.258

Archive contains an infected item

显示全部楼层 · 发表于 2007-7-30 16:12:19

原帖由 snakebone 于 2007-7-30 16:03 发表
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TY.rar'
C:\Documents and Settings\Administrator\桌面\
TY.rar
[0] Archive type: RAR
--> TY.exe
...

难得报准一次~

显示全部楼层 · 发表于 2007-7-30 16:17:15

原帖由 电影结束了 于 2007-7-30 16:10 发表
EQ.......就一条....

2007-07-30 16:09:15 文件保护(创建文件) 操作:阻止
进程路径:C:\Documents and Settings\wangcheng\桌面\TY.exe
文件路径:C:\Program Files\Outlook Express\newqq.dll

奇怪的是他并没有生成成功你关了EQ再试先把outlook目录里的一个生成物删了再运行

[病毒样本] [c32722]QQpsw……

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块