QQsee[MD5: 2A5779]

显示全部楼层 · 发表于 2007-8-9 02:33:20

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=110888 is infected with Trojan-PSW.Win32.QQPass.xw virus

显示全部楼层 · 发表于 2007-8-9 05:10:27

2007-08-08 17:06:18 Registry Protect(Create Registry Value) Action:Block
Process Path:C:\New Folder\QQsee.exe
Registry Path:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Registry name:{D544C22D-1F70-4B1E-873D-D8DABEB26695}

2007-08-08 17:06:18 File Protect(Create file) Action:Block
Process Path:C:\New Folder\QQsee.exe
File Path:C:\Program Files\Common Files\Microsoft Shared\MSINFO\atmQQ2.dll

显示全部楼层 · 发表于 2007-8-9 08:31:32

小红伞能发现啊

[病毒样本] QQsee[MD5: 2A5779]

浏览过的版块