两个[MD5: 3DA288 7BD4E8]

xxwpk007

RT

gho

deleted: Trojan program Trojan-PSW.Win32.QQPass.pf        File: E:\Documents and Settings\Administrator\×ÀÃæ\QQsee.exe//UPack        CN-89FF4B9EA4D6\Administrator        localhost
只报了1个

The EQs

残缺的唯美

--> QQsee.exe
        [DETECTION] Is the Trojan horse TR/PSW.QQPass.PF.148
        [WARNING]   Infected files in archives cannot be repaired!
    --> test.htm
        [INFO]      A backup was created as '46e9eb79.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!
htm？ 怎么报？

woai_jolin

woai_jolin

飞塔
扫描开始于2007年8月6日 18:02:22
F:\v\样本.rar,查到病毒: Suspicious, 操作: <无>
扫描结束于2007年8月6日 18:02:22
总共扫描了1个文件, 其中感染病毒文件为1个. 总共扫描了0个引导区, 感染的引导区为0个.

1688388728

fs

微点卫士

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQSEE.EXE
可疑程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQSEE.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除病毒程序及其衍生物?

1688388728

病毒: Trojan-PSW.Win32.QQPass.pf
文件: 样本[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: Maxthon.exe

taihuxian

Malicious code found in file C:\Documents and Settings\Administrator\Application Data\Opera\Opera\profile\cache4\opr000XD.rar.
Infection: Trojan-PSW.Win32.QQPass.pf
Action: none.

Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\Administrator\Application Data\Opera\Opera\profile\cache4\opr000XD.rar\test.htm.
Infection: VBS/Psyme.DS@dl
Action: none.