3个[MD5: 0621C6 F0D03B 7F1259]

xxwpk007

tracydk

诺顿挂

The EQs

Scan performed at: 2007-8-17 8:27:28
Scanning Log
NOD32 version 2467 (20070816) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 17.8.2007  Time: 08:27:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?QQ.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?PPKart.exe - probably a variant of Win32/PSW.QQShou trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?mishu.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 08:27:39 Total scanning time: 1 sec (00:00:01)

wangjay1980

deleted: Trojan program Trojan-PSW.Win32.QQPass.yi        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/QQ.exe//NSPack
deleted: Trojan program Trojan-Spy.Win32.Delf.uh        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/PPKart.exe//NSPack
见过

风野胤

查杀率 误报率 资源占用就没有比nod强的地方
唯一的售后服务。。。。。。
你是正版么

残缺的唯美

--> QQ.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> PPKart.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> mishu.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '46f7ec2f.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

tracydk

个人喜好问题,你喜欢NOD,不代表要求别人也要喜好[:26:]

风野胤

只是觉得你老是换杀软有点不能理解
norton根本不适合在样本区的

红心王子

PPKart.exe
瑞星 -       江民-     金山  Win32.Troj.OnlineGamesT.hl.184676

mishu.exe
瑞星 -       江民 -    金山  -

QQ.exe

瑞星 -      


江民 Trojan/PSW.QQPass.qxp


金山  Win32.PSWTroj.QQPass.139361

碧水寒潭

Start of the scan: 2007年8月17日  08:39

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\样本.rar
  [0] Archive type: RAR
  --> QQ.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> PPKart.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> mishu.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年8月17日  08:40
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found