金狐的东西 c71c9084 aa5964bc da3a6e6

电影结束了

样本来自于http://bbs.kafan.cn/viewthread.php?tid=123634&extra=page%3D1

盗QQ的...

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\桌面\无言QQ密码寻回者0714.exe]
                    …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\桌面\QQwy.exe]
                    …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\桌面\server__.exe]
                    …………引擎[3]发现Suspicious File
文件数:3   病毒数:3  比重:1
OK  扫描完毕！

[ 本帖最后由 FBAV 于 2007-8-28 17:13 编辑 ]

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\言QQ密回者0714.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\QQwy.exe : infected Trojan-PSW.Win32.QQPass.xk
C:\Documents and Settings\uhthn\Desktop\virus\server__.exe : infected MalwareScope.Trojan-PSW.Game.14


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 3     
- scanned         : 0       -  scanned    : 0       - scanned     : 3     
- contain viruses : 0       -  infected   : 0       - infected    : 3     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0     


Uhthn Anti-Spyware V3 Alpha

C:\Documents and Settings\uhthn\Desktop\virus\言QQ密回者0714.exe - Suspicious of Trojan-Downloader.Win32.Delf.1
C:\Documents and Settings\uhthn\Desktop\virus\QQwy.exe - Suspicious of Trojan-Downloader.Win32.Delf.1
C:\Documents and Settings\uhthn\Desktop\virus\server__.exe - Suspicious of Trojan-PSW.Game.1

3 - scanned
0 - infected
3 - suspicious
0 - cured
0 - deleted

欠妳緈諨

cbz107

费尔报

The EQs

C:\Documents and Settings\Don johnson\桌面\桌面\server__.exe - probably a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\桌面\QQwy.exe - probably a variant of Win32/Genetik trojan

啊弥陀佛

微点砍掉

wangjay1980

detected: Trojan program Trojan-PSW.Win32.QQPass.xk        File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\QQwy.exe//NSPack
detected: Trojan program Backdoor.Win32.Hupigon.dev        File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\server__.exe//PE_Patch.UPX//UPX

残缺的唯美

咖啡启发=。=

sheep8825

被RISING给咔了！
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$VR00.356\
桌面.rar\桌面.part1.rar>>无言QQ密码寻回者0714.exe>>
nspack
Trojan.PSW.QQPass.tiq
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$VR00.356\
桌面.rar\桌面.part1.rar>>QQwy.exe>>nspack
Trojan.PSW.Win32.QQPass.qmj
扫描文件数8个
发现病毒数2个
扫描时间：0小时1分钟44秒838毫秒