某贴暗号下载者下的黑洞和盗Q[MD5: CA7675 55FD36 3DF26C FE3BE1 08ED3C]

promised

C:\ABC\bl\样本.rar
C:\ABC\bl\样本.rar\atmQQ2.dll
>>> Virus 'Mal/EncPk-AP' found in file C:\ABC\bl\样本.rar\atmQQ2.dll
C:\ABC\bl\样本.rar\add.exe
>>> Virus 'Mal/Behav-081' found in file C:\ABC\bl\样本.rar\add.exe
C:\ABC\bl\样本.rar\brc_Server.dll
>>> Virus 'Troj/Delf-EYC' found in file C:\ABC\bl\样本.rar\brc_Server.dll
C:\ABC\bl\样本.rar\brc_Server.exe
>>> File "C:\ABC\bl\样本.rar\brc_Server.exe" has been identified as suspicious 'Sus/Malware-C'.
C:\ABC\bl\样本.rar\anhao.dll

C:\ABC\bl\样本.rar:\atmQQ2.dll - 特征码 'MalwareScope.Worm.Viking.4' 被发现
C:\ABC\bl\样本.rar:\add.exe - 特征码 'Virus.Win32.Delf.GIY' 被发现
C:\ABC\bl\样本.rar:\brc_Server.dll - 特征码 'Backdoor.Win32.Delf.axh' 被发现
C:\ABC\bl\样本.rar:\brc_Server.exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\bl\样本.rar:\anhao.dll
C:\ABC\bl\样本.rar
6 文件被扫描
   (1 压缩档 5 文件)
4 特征码被侦测
0 可疑代码段被发现
耗时: 0:02.062

Graybird

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> atmQQ2.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.21910
  --> add.exe
      [DETECTION] Is the Trojan horse TR/Drop.AtomPSW
  --> brc_Server.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Blackhole.AU Backdoor server programs
  --> brc_Server.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月24日  10:36
Used time: 00:23 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

浪滔天

卡巴4个
已删除: 木马程序 Trojan-PSW.Win32.QQPass.ajz        文件: F:\病毒样本\样本.rar/atmQQ2.dll
已删除: 木马程序 Trojan-PSW.Win32.QQPass.ajz        文件: F:\病毒样本\样本.rar/add.exe
已删除: 木马程序 Backdoor.Win32.BlackHole.au        文件: F:\病毒样本\样本.rar/brc_Server.dll
已删除: 木马程序 Backdoor.Win32.BlackHole.au        文件: F:\病毒样本\样本.rar/brc_Server.exe

will

avast! 4个  
Sign of "Win32:QQPass-MH [Trj]"has been found in "样本.rar\atmQQ2.dll\[NsPack]"
Sign of "Win32:Delf-GIY [Drp]"has been found in "样本.rar\add.exe"
Sign of "Win32:Hupigon-BNV [Trj]"has been found in "样本.rar\brc_Server.dll"
Sign of "Win32:Delf-DLH [Trj]"has been found in "样本.rar\brc_Server.exe"

antivir 4个
Begin scan in 'C:\Documents and Settings\Administrator\Desktop\样本.rar'
C:\Documents and Settings\Administrator\Desktop\样本.rar
  [0] Archive type: RAR
  --> atmQQ2.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.21910
  --> add.exe
      [DETECTION] Is the Trojan horse TR/Drop.AtomPSW
  --> brc_Server.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Blackhole.AU Backdoor server programs
  --> brc_Server.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING]   The file was ignored!

Graybird

The file 'anhao.dll' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows XP Internet Explorer 7 (KB939653)'.

天灰

大蜘蛛发现三个

样本.rar\atmQQ2.dll;C:\Documents and Settings\77\My Documents\样本.rar;Trojan.PWS.Qqpass.1532;;
样本.rar\add.exe;C:\Documents and Settings\77\My Documents\样本.rar;Trojan.Inject.500;;
样本.rar\brc_Server.dll;C:\Documents and Settings\77\My Documents\样本.rar;BackDoor.BlackHole;;
样本.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQPass.ytv
病毒： Trojan.PSW.Win32.QQPass.ywn
病毒： Backdoor.Win32.BlackHole.ds
病毒： Backdoor.Win32.BlackHole.ea

用户来源：互联网

软件版本：20.19.43

jimmyleo

D:\DOWNLOAD\VIRUSSCAN\样本\atmQQ2.dll ... Found trojan or variant New Malware.aq !!!

风野胤

4
R:\��.rar » RAR » atmQQ2.dll - probably a variant of Win32/Genetik trojan
R:\��.rar » RAR » add.exe - probably a variant of Win32/PSW.IM trojan
R:\��.rar » RAR » brc_Server.dll - probably a variant of Win32/BlackHole trojan
R:\��.rar » RAR » brc_Server.exe - probably a variant of Win32/Delf trojan

SONGBOWEN

1.03MB？？这么大？版主就是版主，换我们，只能分卷压缩了，好像是3卷……