无言QQ大盗2007[C19E60]

lsyer

--> sysdfhj.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!

woai_jolin

扫描进行于：2007/8/1 15:34:25
扫描日志
NOD32版本 2430 (20070731) NT
命令行： G:\v\无言QQ大盗.rar
C:\Program Files\Eset\nod32.exe - 是正常的
1 的MBR区.物理磁盘 - 是正常的
1 的启动引导区.物理磁盘 - 是正常的

日期： 1.8.2007  时间：15:34:26
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：G:\v\无言QQ大盗.rar
G:\v\无言QQ大盗.rar >>RAR >>sysdfhj.exe - 可能是 Win32/Genetik 木马 的一个变种
G:\v\无言QQ大盗.rar >>RAR >>说明.txt - 是正常的
G:\v\无言QQ大盗.rar:Zone.Identifier - 是正常的
已扫描的文件数目：3
已发现的病毒数目：1
完成时间： 15:34:27 总扫描时间：1 秒 (00:00:01)

scottxzt

比较容易拦截的

zongkai

咖啡启发
C:\Documents and Settings\......\Local Settings\Temporary Internet Files\Content.IE5\4MIMGFAJ\无言QQ大盗[1].rar\SYSDFHJ.EXE         New Malware.aq

jingyanglf

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\MNS7QHCJ\无言QQ大盗[1].rar\sysdfhj.exe\data001 - probably infected with DLOADER.Trojan
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\MNS7QHCJ\无言QQ大盗[1].rar\sysdfhj.exe\data002 - infected with Trojan.PWS.Wow

Archive contains 2 infected items

dsl5

乱吹


反病毒引擎版本最后更新扫描结果AhnLab-V32007.7.31.12007.08.01-AntiVir7.4.0.542007.08.01DR/Delphi.GenAuthentium4.93.82007.07.31Possibly a new variant of W32/Threat-IKNP-based!MaximusAvast4.7.1029.02007.07.31Win32:Nilage-AIAVG7.5.0.4762007.07.31Generic6.GIBitDefender7.22007.08.01BehavesLike:Trojan.ShellHookCAT-QuickHeal9.002007.07.31(Suspicious) - DNAScanClamAV0.912007.08.01-DrWeb4.332007.07.31DLOADER.TrojaneSafe7.0.15.02007.07.31suspicious Trojan/WormeTrust-Vet31.1.50222007.08.01-Ewido4.02007.07.31-FileAdvisor12007.08.01-Fortinet2.91.0.02007.08.01-F-Prot4.3.2.482007.07.31W32/Threat-IKNP-based!MaximusF-Secure6.70.13030.02007.08.01Trojan-PSW.Win32.QQPass.pfIkarusT3.1.1.82007.08.01-Kaspersky4.0.2.242007.08.01Trojan-PSW.Win32.QQPass.pfMcAfee50872007.07.31New Malware.aqMicrosoft1.27042007.08.01PWS:Win32/QQpass.CZNOD32v224302007.07.31probably a variant of Win32/GenetikNorman5.80.022007.07.31-Panda9.0.0.42007.08.01Suspicious fileRising19.34.21.002007.08.01Trojan.PSW.Win32.QQPass.jSophos4.19.02007.08.01Mal/PackerSunbelt2.2.907.02007.07.31VIPRE.SuspiciousSymantec102007.08.01-TheHacker6.1.7.1602007.08.01-VBA323.12.2.22007.07.31suspected of Embedded.MalwareScope.Trojan-PSW.Game.7VirusBuster4.3.26:92007.07.31-Webwasher-Gateway6.0.12007.08.01Trojan.Delphi.Gen附加信息File size: 73932 bytesMD5: aa1159c7ed834c95591c1768d5e0402fSHA1: a2b1c08daf04c36c91d5a41b594946421b837be9packers: NsPack, Upack, Upackpackers: NSPACK, UPACKSunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.




诺顿居然过了

king6808

AhnLab-V3 2007.7.31.1 2007.08.01 -
AntiVir 7.4.0.54 2007.08.01 DR/Delphi.Gen
Authentium 4.93.8 2007.07.31 Possibly a new variant of W32/Threat-IKNP-based!Maximus
Avast 4.7.1029.0 2007.07.31 Win32:Nilage-AI
AVG 7.5.0.476 2007.07.31 Generic6.GI
BitDefender 7.2 2007.08.01 BehavesLike:Trojan.ShellHook
CAT-QuickHeal 9.00 2007.07.31 (Suspicious) - DNAScan
ClamAV 0.91 2007.08.01 -
DrWeb 4.33 2007.08.01 DLOADER.Trojan
eSafe 7.0.15.0 2007.07.31 suspicious Trojan/Worm
eTrust-Vet 31.1.5022 2007.08.01 -
Ewido 4.0 2007.07.31 -
FileAdvisor 1 2007.08.01 -
Fortinet 2.91.0.0 2007.08.01 -
F-Prot 4.3.2.48 2007.07.31 W32/Threat-IKNP-based!Maximus
F-Secure 6.70.13030.0 2007.08.01 Trojan-PSW.Win32.QQPass.pf
Ikarus T3.1.1.8 2007.08.01 -
Kaspersky 4.0.2.24 2007.08.01 Trojan-PSW.Win32.QQPass.pf
McAfee 5087 2007.07.31 New Malware.aq
Microsoft 1.2704 2007.08.01 PWS:Win32/QQpass.CZ
NOD32v2 2430 2007.07.31 probably a variant of Win32/Genetik
Norman 5.80.02 2007.07.31 -
Panda 9.0.0.4 2007.08.01 Suspicious file
Prevx1 V2 2007.08.01 -
Rising 19.34.21.00 2007.08.01 Trojan.PSW.Win32.QQPass.j
Sophos 4.19.0 2007.08.01 Mal/Packer
Sunbelt 2.2.907.0 2007.07.31 VIPRE.Suspicious
Symantec 10 2007.08.01 -
TheHacker 6.1.7.160 2007.08.01 -
VBA32 3.12.2.2 2007.07.31 suspected of Embedded.MalwareScope.Trojan-PSW.Game.7
VirusBuster 4.3.26:9 2007.07.31 -
Webwasher-Gateway 6.0.1 2007.08.01 Trojan.Delphi.Gen

lovecho

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQPass.j

MAC地址：00:11:09:11:44:CB

用户来源：互联网

软件版本：19.34.21

onesand

C:\Documents and Settings\huaxun\桌面\无言QQ大盗.rar
  [0] Archive type: RAR
  --> sysdfhj.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was moved to '4701edb9.qua'!

Guanguancan

X星、微点全杀