[MD5: 65F4E2]

显示全部楼层 · 发表于 2007-10-16 16:45:23

一个QQ群里传播的病毒,卡巴杀已删除：木马程序 Trojan-PSW.Win32.QQPass.ahq 文件: D:\新建文件夹\样本.rar/我的照片.Exe//UPX

显示全部楼层 · 发表于 2007-10-16 16:46:11

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=140219 is infected with Trojan-PSW.Win32.QQPass.ahq virus

显示全部楼层 · 发表于 2007-10-16 16:52:37

MicroVita AntiSpyware
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\Virus\6555555555.rar]
                  …………特征码引擎[1]发现病毒
OK  扫描完毕！

显示全部楼层 · 发表于 2007-10-16 16:59:30

C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 我的照片.Exe - probably a variant of Win32/AutoRun.Q worm

显示全部楼层 · 发表于 2007-10-16 17:01:59

微点干掉

时间处理结果木马名称木马进程名木马文件创建者
2007-10-16 17:03:22 处理成功未知间谍软件 C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS88.SYS C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.303\我的照片.EXE
2007-10-16 17:03:22 处理成功未知间谍软件 C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN78.JMP C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.303\我的照片.EXE
2007-10-16 17:03:21 处理成功未知间谍软件 C:\DOCUMENTS AND SETTINGS\XIAOHF\LOCAL SETTINGS\TEMP\RAR$EX00.303\我的照片.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE

显示全部楼层 · 发表于 2007-10-16 18:16:41

Result: 1 malware found
Trojan-PSW.Win32.QQPass.ahq (virus)
C:\Users\Administrator\Desktop\Ñù±¾.rar\ÎÒµÄÕÕÆ¬.Exe

显示全部楼层 · 发表于 2007-10-16 18:41:31

C:\��.rar\我的照片.Exe - infected with Trojan.PWS.Lineage.origin

Archive contains an infected item

DRWEB 4.44 Kill

显示全部楼层 · 发表于 2007-10-16 19:22:36

2007-10-16 19:22:17 1192533737 Administrator 3564 Sign of "Win32:Delf-FZG [Trj]" has been found in "D:\Downloads\样本.rar\我的照片.Exe\[UPX]\[Embedded#062f8]" file.

显示全部楼层 · 发表于 2007-10-16 19:27:03

经常是我的照片，看的多了也就知道不是狼来了。

显示全部楼层 · 发表于 2007-10-16 20:26:21

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 557
Paranoia Database - 10503
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\我的照片.Exe

C:\Documents and Settings\uhthn\Desktop\我的照片.Exe - Infected Win32.Trojan-PSW.QQPass.a

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

[病毒样本] [MD5: 65F4E2]

本帖子中包含更多资源

浏览过的版块