从博客上捉的小病毒

显示全部楼层 · 发表于 2007-9-9 21:36:30

[ 本帖最后由 promised 于 2007-9-9 21:38 编辑 ]

显示全部楼层 · 发表于 2007-9-9 21:39:06

Begin scan in 'C:\virus\sysdown.rar'
C:\virus\
  sysdown.rar
  sysdown.rar:Zone.Identifier
[0] Archive type: RAR
--> sysdown.exe
      [DETECTION] Contains detection pattern of the worm WORM/QQPass.A
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-9 21:39:30

IKARUS - T3SCAN V1.27 (WIN32)
      T3 V1.01.12
      Copyright (c) 2003 - 2007 by IKARUS Software.
      Written by Richard Schmoegner.
      All rights reserved.

Signature-database from 8.9.2007 17:04:22 (Build: 69471)

C:\virus\sysdown.rar:\sysdown.exe - Signature 'Trojan-PWS.Win32.Delf.mc' found

      2 Files scanned
      (1 Archiv with 1 file)
      1 Signature found
      0 Suspect code-parts found
      Used time: 0:00.101

显示全部楼层 · 发表于 2007-9-9 21:39:48

C:\Documents and Settings\sx\桌面\virus2.rar>>sysdown.exe>>upx_c

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.Agent.vcd

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.62

显示全部楼层 · 发表于 2007-9-9 21:42:20

detected: virus Worm.Win32.QQPass.a File: C:\Documents and Settings\Owner\×ÀÃæ\sysdown.rar/sysdown.exe//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-9-9 21:47:05

fcs报

显示全部楼层 · 发表于 2007-9-9 21:49:18

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Win32.HLLW.Autoruner.249
Error code: -1602
Requested URL: /bbs/attachment.php?aid=125810
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143

显示全部楼层 · 发表于 2007-9-9 21:53:55

Scan performed at: 2007-9-9 21:53:28
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\sysdown.rar

Date: 9.9.2007 Time: 21:53:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\sysdown.rar
D:\Documents and Settings\EKINCHENG\桌面\sysdown.rar ?RAR ?sysdown.exe - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:53:30 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-9-9 22:06:45

McAfee, PWS-QQPass.dll

显示全部楼层 · 发表于 2007-9-9 22:29:56

[病毒样本] 从博客上捉的小病毒

本帖子中包含更多资源

本帖子中包含更多资源