qqhelper

显示全部楼层 · 发表于 2007-12-9 12:39:23

Starting the file scan:

Begin scan in 'E:\qqhelper.rar'
E:\qqhelper.rar
  [0] Archive type: RAR
  --> 4p0qwar.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ee3ufr1g3p.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> rcmd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!

已上报~

[ 本帖最后由 Graybird 于 2007-12-9 12:41 编辑 ]

显示全部楼层 · 发表于 2007-12-9 12:39:59

Starting the file scan:

Begin scan in 'D:\Virus\4p0qwar.dll'
D:\Virus\4p0qwar.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [WARNING] The file was ignored!
Begin scan in 'D:\Virus\ee3ufr1g3p.sys'
D:\Virus\ee3ufr1g3p.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
Begin scan in 'D:\Virus\logo.exe'
Begin scan in 'D:\Virus\my_70145.exe'
Begin scan in 'D:\Virus\rcmd.sys'
D:\Virus\rcmd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-12-9 12:40:29

Starting the file scan:

Begin scan in 'C:\Users\Xing\Downloads\qqhelper.rar'
C:\Users\Xing\Downloads\qqhelper.rar
  [0] Archive type: RAR
  --> 4p0qwar.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ee3ufr1g3p.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> rcmd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-12-9 12:41:37

显示全部楼层 · 发表于 2007-12-9 12:47:21

detected: virus Heur.Downloader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\qqhelper.rar/my_70145.exe

已上报

显示全部楼层 · 发表于 2007-12-9 12:51:07

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.php?aid=166249

The folowing error was encountered:

The requested object is INFECTED. The following viruses Heur.Downloader were found

Please contact your service provider if you feel this is incorrect.

显示全部楼层 · 发表于 2007-12-9 13:10:16

Hello,

4p0qwar.dll, ee3ufr1g3p.sys, logo.exe, rcmd.sys - Trojan-Downloader.Win32.Hmir.li

These files are already detected. Please update your antivirus bases.

my_70145.exe - Trojan-Downloader.Win32.Agent.fwd

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2007-12-9 13:13:38

已删除：木马程序 Trojan-Downloader.Win32.Hmir.li 文件: C:\Documents and Settings\Administrator\桌面\qqhelper\logo.exe

显示全部楼层 · 发表于 2007-12-9 13:41:52

G:\Users\Administrator\Desktop\qqhelper.rar » RAR » logo.exe - a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
G:\Users\Administrator\Desktop\qqhelper.rar » RAR » 4p0qwar.dll - probably a variant of Win32/TrojanDownloader.Agent.NPO trojan
G:\Users\Administrator\Desktop\qqhelper.rar » RAR » ee3ufr1g3p.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
G:\Users\Administrator\Desktop\qqhelper.rar » RAR » rcmd.sys - a variant of Win32/Rootkit.Agent.NCK trojan

[病毒样本] qqhelper

本帖子中包含更多资源

本帖子中包含更多资源