[0c2c07][f5ca7b] 海洋的QQ木马

FBAV

为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]              
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……

正在检查启动……
[E:\黑客工具\海洋顶端QQ木马\海洋顶端QQ木马\海洋顶端QQ木马生成.exe]
                    …………特征码引擎[1]发现病毒
[E:\黑客工具\海洋顶端QQ木马\海洋顶端QQ木马\海洋顶端QQ木马生成1.exe]
                    …………特征码引擎[1]发现病毒
[E:\黑客工具\海洋顶端QQ木马\海洋顶端QQ木马\海洋顶端QQ木马生成2.exe]
                    …………特征码引擎[1]发现病毒
文件数:4   病毒数:3  比重:0.75
OK  扫描完毕！

红心王子

已删除: 木马程序 Trojan-PSW.Win32.QQPass.xx        文件: C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip\海洋顶端QQ木马生成.exe/UPX
已删除: 木马程序 Trojan-PSW.Win32.QQPass.xx        文件: C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip\海洋顶端QQ木马生成1.exe/UPX
已删除: 木马程序 Trojan-PSW.Win32.QQPass.xx        文件: C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip\海洋顶端QQ木马生成2.exe/UPX

微点卫士

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\海洋顶端QQ木马生成.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSYH.BAK
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\海洋顶端QQ木马生成1.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\海洋顶端QQ木马生成2.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSYH.BAK
是否删除木马程序及其衍生物?

The EQs

Scan performed at: 2007-8-21 13:16:17
Scanning Log
NOD32 version 2472 (20070821) NT
Command line: C:\Documents and Settings\Don johnson\桌面\海洋顶端QQ木马.zip
Operating memory - is OK

Date: 21.8.2007  Time: 13:16:21
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\海洋顶端QQ木马.zip
C:\Documents and Settings\Don johnson\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成1.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成2.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 13:16:22 Total scanning time: 1 sec (00:00:01)

欠妳緈諨

似落花

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=116960 is infected with Trojan-PSW.Win32.QQPass.xx virus

taihuxian

Scan performed at: 2007-8-21 13:48:08
Scanning Log
NOD32 version 2472 (20070821) NT
Command line: C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip
Operating memory - is OK

Date: 21.8.2007  Time: 13:48:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip
C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成1.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip ?ZIP ?海洋顶端QQ木马生成2.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 13:48:11 Total scanning time: 0 sec (00:00:00)

hahacomcn

Start of the scan: 2007年8月21日  14:18

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip'
C:\Documents and Settings\Administrator\桌面\海洋顶端QQ木马.zip
  [0] Archive type: ZIP
  --> º£Ñ󶥶ËQQľÂíÉú³É.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> º£Ñ󶥶ËQQľÂíÉú³É1.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> º£Ñ󶥶ËQQľÂíÉú³É2.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen

沸沸

真搞笑，哪个风暴还来什么内侧版

碧水寒潭

Start of the scan: 2007年8月21日  15:57

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\海洋顶端QQ木马.zip
  [0] Archive type: ZIP
  --> º£Ñ󶥶ËQQľÂíÉú³É.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> º£Ñ󶥶ËQQľÂíÉú³É1.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> º£Ñ󶥶ËQQľÂíÉú³É2.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年8月21日  15:57
Used time: 00:08 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found