大家看看微点在网页上截获的未知木马！

xiaotuzi

请告诉我这些样本本身是病毒呢还是被病毒感染的文件！

tracydk

avast全杀了

xlang

KV也全杀了

电影结束了

Scan performed at: 2007-9-12 19:11:02
Scanning Log
NOD32 version 2524 (20070912) NT
Command line: C:\Documents and Settings\wangcheng\桌面\COMMOMDS.rar C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar C:\Documents and Settings\wangcheng\桌面\SYS332.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 12.9.2007  Time: 19:11:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\COMMOMDS.rar; C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar; C:\Documents and Settings\wangcheng\桌面\SYS332.rar
C:\Documents and Settings\wangcheng\桌面\COMMOMDS.rar ?RAR ?COMMOMDS.EXE - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\wangcheng\桌面\COMMOMDS.rar:Zone.Identifier - is OK
C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar ?RAR ?NEWTEMP.BAK - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar ?RAR ?NEWTEMP.BKK - probably a variant of Win32/PSW.OnLineGames.NBR trojan
C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar ?RAR ?NEWTEMP.DLL - probably a variant of Win32/PSW.OnLineGames.NBR trojan
C:\Documents and Settings\wangcheng\桌面\NEWTEMP.rar:Zone.Identifier - is OK
C:\Documents and Settings\wangcheng\桌面\SYS332.rar ?RAR ?SYS332.EXE - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\wangcheng\桌面\SYS332.rar:Zone.Identifier - is OK
Number of scanned files: 11
Number of threats found: 5
Number of active threats: 3
Time of completion: 19:11:10 Total scanning time: 6 sec (00:00:06)

kp2006

kv2008

Trojan/PSW.QQPass.rgm

[ 本帖最后由 kp2006 于 2007-9-12 19:16 编辑 ]

浪滔天

卡巴全杀
已检测到: 病毒 Worm.Win32.QQPass.a        URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX
已检测到: 病毒 Worm.Win32.QQPass.a        URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX
已检测到: 病毒 Worm.Win32.QQPass.a        URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4488
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\COMMOMDS.EXE - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\NEWTEMP.BAK - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\NEWTEMP.BKK - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\NEWTEMP.DLL - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\SYS332.EXE - Suspicious of Win32.Trojan-PSW.Game.1

5 Files scanned
0 Infected files found
5 Suspicious files found
0 Files cured
0 Files deleted

IllusionWing

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 3.7.0
HC0.rlb = 2.8.2
HC2.rlb = 2.3.8
FN0.rlb = 2.3.0
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\sss\COMMOMDS.rar>>COMMOMDS.EXE 检测到 Trojan.QQPass.a
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\sss\NEWTEMP.rar>>NEWTEMP.BAK 检测到 Trojan.QQPass.a
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\sss\NEWTEMP.rar>>NEWTEMP.BKK 检测到 Risk.HookTool.b
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\sss\NEWTEMP.rar>>NEWTEMP.DLL 检测到 Risk.HookTool.b
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\新建文件夹 (5)\sss\SYS332.rar>>SYS332.EXE 检测到 Trojan.QQPass.a
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0219，共扫描的文件数量：8，共扫描到的威胁数量：5，威胁率：0.625

timhas266

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=126844 is infected with Worm.Win32.QQPass.a virus

Nblock

微点防网马很强的