神马无数D防御，先藐视是他

显示全部楼层 · 发表于 2012-2-21 16:38:33

绅博周幸发表于 2012-2-21 16:37
看看6，7楼，搞不好还是毒霸误报呢

实机运行一下看看

显示全部楼层 · 发表于 2012-2-21 16:42:40

bd报安全呀。

显示全部楼层 · 发表于 2012-2-21 16:42:54

上次好像也是这个会结束QQ进程有盗号行为

显示全部楼层 · 发表于 2012-2-21 16:51:38

过卡巴0 0

显示全部楼层 · 发表于 2012-2-21 16:53:16

绅博周幸发表于 2012-2-21 16:31
这样本已经上报过BD 4次了，都说是clean,是不是毒难说

Thank you for your email.

The analysis of the files has been completed with the following results:

Detection will be added for bdaucomon.dll as Trojan.PWS.QQPass.NHZ

Please do not hesitate to send us even more suspect/infected files in the
future.

Have a nice day.

Best regards,
George Poienaru
Bitdefender Technical Support Engineer
-------------------------------------
http://www.bitdefender.com/help
https://myaccount.bitdefender.com
-------------------------------------
Use Quick Scan: http://quickscan.bitdefender.com

---------------------- Original Message ---------------------

> The exe file (clean) execute the dll file (infected) and kill the process
> of QQ.exe then steal the password of QQ account.
>
> By the way,BD really is not good at killing this kind of viruses.

之前一个这种类型的18天没报我上报委婉的批评了BD一顿嘿嘿结果好了要不你再试试

显示全部楼层 · 发表于 2012-2-21 16:55:22

微点扫描KILL

显示全部楼层 · 发表于 2012-2-21 16:58:45

过Bullguard主防

显示全部楼层 · 发表于 2012-2-21 17:22:59

晕卡巴下载无视

显示全部楼层 · 发表于 2012-2-21 17:28:41

绅博周幸发表于 2012-2-21 16:37
看看6，7楼，搞不好还是毒霸误报呢

360也报

显示全部楼层 · 发表于 2012-2-21 17:29:41

本帖最后由 wuyongliang 于 2012-2-21 17:30 编辑

大胆的双击了过了FS DG都没提示 QQ被关闭自动加载启动项我DG开的始终询问结果自己允许了

[病毒样本] 神马无数D防御，先藐视是他