卡7启发可报，过DRWEB【MD5：e8ea8fa】

pmj_sh

文件 790.rar 接收于 2007.09.20 09:37:37 (CET)

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2007.9.20.0	2007.09.19	-
AntiVir	7.6.0.15	2007.09.20	DR/Delphi.Gen
Authentium	4.93.8	2007.09.19	-
Avast	4.7.1043.0	2007.09.19	Win32:Autorun-BS
AVG	7.5.0.485	2007.09.19	-
BitDefender	7.2	2007.09.20	Generic.PWStealer.CBBB0789
CAT-QuickHeal	9.00	2007.09.19	-
ClamAV	0.91.2	2007.09.20	Trojan.Delf-1462
DrWeb	4.33	2007.09.19	-
eSafe	7.0.15.0	2007.09.19	suspicious Trojan/Worm
eTrust-Vet	31.2.5149	2007.09.19	-
Ewido	4.0	2007.09.19	-
FileAdvisor	1	2007.09.20	-
Fortinet	3.11.0.0	2007.09.20	-
F-Prot	4.3.2.48	2007.09.19	-
F-Secure	6.70.13030.0	2007.09.20	-
Ikarus	T3.1.1.12	2007.09.20	Virus.Win32.AutoRun.bs
Kaspersky	4.0.2.24	2007.09.20	-
McAfee	5123	2007.09.19	PWS-QQGame
Microsoft	1.2803	2007.09.20	PWS:Win32/Agent.AC
NOD32v2	2541	2007.09.20	probably a variant of Win32/AutoRun.Q
Norman	5.80.02	2007.09.19	-
Panda	9.0.0.4	2007.09.20	Suspicious file
Prevx1	V2	2007.09.20	Heuristic: Suspicious File With Persistence
Rising	19.41.31.00	2007.09.20	-
Sophos	4.21.0	2007.09.20	Mal/Dropper-H
Sunbelt	2.2.907.0	2007.09.19	-
Symantec	10	2007.09.20	Infostealer.QQRob.A
TheHacker	6.2.5.063	2007.09.20	-
VBA32	3.12.2.4	2007.09.19	MalwareScope.Trojan-PSW.Game.7
VirusBuster	4.3.26:9	2007.09.19	Trojan.PWS.QQGame.Gen
Webwasher-Gateway	6.0.1	2007.09.20	Trojan.Delphi.Gen
附加信息
File size: 31279 bytes
MD5: 719471434fd76bac791cf0f92e8ea8fa
SHA1: db41b3b1f64959c50bded0de9bec252341473aff
packers: UPX
packers: UPX
packers: UPX, BINARYRES
packers: UPX
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=4CC4C2D8525D73448567005C9E641E00DC05670D

检测到
------
状态 对象
---- ----
检测到：病毒 Heur.Downloader (修改) URL: http://www.eqtxgi.org.cn/790.rar//我的照片.Exe

kp2006

Win32:Autorun-BS [Wrm]

zszzd

Redevil

已经上报

drweb 4.44报

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\790.rar - probably a variant of Win32/AutoRun.Q worm - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\790.rar » RAR » 我的照片.Exe - probably a variant of Win32/AutoRun.Q worm

king6808

790.rar >>RAR >>我的照片.Exe - 可能是 Win32/AutoRun.Q 蠕虫 的一个变种

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 152
Paranoia Database - 5386
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\我的照片.Exe

C:\Documents and Settings\uhthn\Desktop\我的照片.Exe - Infected with SDB:Win32.Trojan-PSW.QQPass.bam - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\790.rar'
C:\Documents and Settings\Administrator\My Documents\
  790.rar
    [0] Archive type: RAR
    --> ÎÒµÄÕÕƬ.Exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

solcroft

还是再测试AntiBot看看