QQ盗号木马，主流貌似仅ESET杀

显示全部楼层 · 发表于 2012-4-24 22:56:37

https://www.virustotal.com/file/ ... nalysis/1335279124/
Detection ratio: 5 / 42
360主防成功拦截危险动作，但进程还在

显示全部楼层 · 发表于 2012-4-24 23:00:18

嘿嘿

Malcide Scanner
Version - 1.0.675

Heuristics - Extreme

Scanning now...
Date - 2012/4/24 Time - 23:00:07
Targets:
C:\Users\Gateway\Desktop\资料.rar

C:\Users\Gateway\Desktop\资料.rar > RAR > 像片.exe - HEUR:Win32.Virus.Gen

1 Objects scanned
0 Malicious objects found
1 Suspicious objects found
1 Threats found

Finish time - 23:00:08
Duration - 1 seconds (00:00:01)

显示全部楼层 · 发表于 2012-4-24 23:00:19

OLE控制

File ID    Filename    Size (Byte) Result
26833462    资料.rar 248.69 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID    Filename    Size (Byte) Result
26833463         271 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2012-4-24 23:13:50

金山卫士未知
运行comodo未知并限制
idp没反应
也许是在限制情况下，后来弹框一个

显示全部楼层 · 发表于 2012-4-24 23:18:46

过微点。

显示全部楼层 · 发表于 2012-4-24 23:24:20

本帖最后由 humanlwj52 于 2012-4-24 23:32 编辑

ESET kill.

C:\Users\TOSHIBA\Desktop\资料.rar > RAR > ____.exe - Win32/PSW.VB.NIV 特洛伊木马的变种

To AVG.

显示全部楼层 · 发表于 2012-4-24 23:35:00

norton云启发killed

显示全部楼层 · 发表于 2012-4-25 02:02:14

过gdata扫描和行为监控

显示全部楼层 · 发表于 2012-4-25 08:20:50

xyc5238207 发表于 2012-4-25 02:02
过gdata扫描和行为监控

We have sent the files to our Virus Lab for analysis purposes and we will
contact you with more information once this process has been successfully
completed.

Best regards,

--
Andrei DAMIAN-FEKETE
BitDefender Technical Support Engineer

显示全部楼层 · 发表于 2012-4-25 08:26:46

2012-4-25 08:25:00 访问COM接口阻止
进程: e:\downloads\基本用户\资料\像片.exe
目标: {8BC3F05E-D86B-11D0-A075-00C04FB68820} Windows Management and Instrumentation
规则: [应用程序]*

[病毒样本] QQ盗号木马，主流貌似仅ESET杀

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源