盗Q的

显示全部楼层 · 发表于 2008-2-6 20:44:12

C:\ABC\1\qq.rar:\QQwg.exe - 特征码 'Trojan-Dropper.Win32.Agent.WF' 被发现
C:\ABC\1\qq.rar:\atmQQ2.dll - 特征码 'Trojan.Win32.BCB.m' 被发现
C:\ABC\1\qq.rar:\12345.dll
C:\ABC\1\qq.rar:\ww.exe - 特征码 'Dialer' 被发现
C:\ABC\1\qq.rar

显示全部楼层 · 发表于 2008-2-6 20:46:10

F:\virus\qq.rar » RAR » QQwg.exe - Win32/TrojanDropper.Agent.WF trojan
F:\virus\qq.rar » RAR » atmQQ2.dll - probably a variant of Win32/Genetik trojan
F:\virus\qq.rar » RAR » 12345.dll - probably a variant of Win32/Genetik trojan
F:\virus\qq.rar » RAR » ww.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-2-6 20:48:58

ClamAV
I:\virus\test/12345.dll: Trojan.Killav-109 FOUND
I:\virus\test/QQwg.exe: Trojan.Dropper-3144 FOUND
I:\virus\test/ww.exe: Trojan.Crypted-4 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 206736
Engine version: 0.92
Scanned directories: 1
Scanned files: 4
Infected files: 3
Data scanned: 1.23 MB
Time: 6.890 sec (0 m 6 s)

显示全部楼层 · 发表于 2008-2-6 20:49:06

微点杀的

显示全部楼层 · 发表于 2008-2-6 20:50:04

egin scan in 'D:\BOOK\qq.rar'
D:\BOOK\qq.rar
  [0] Archive type: RAR
  --> QQwg.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.WF.86
  --> atmQQ2.dll
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.akc
  --> 12345.dll
   [DETECTION] Is the Trojan horse TR/Agent.ekn
  --> ww.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.akc
   [INFO]    The file was delete

显示全部楼层 · 发表于 2008-2-6 20:51:14

Starting the file scan:

Begin scan in 'E:\QQ\qq.rar'
E:\QQ\qq.rar
  [0] Archive type: RAR
  --> QQwg.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.WF.86
  --> atmQQ2.dll
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.akc
  --> 12345.dll
   [DETECTION] Is the Trojan horse TR/Agent.ekn
  --> ww.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.akc
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-6 20:52:16

2008-2-6 20:51:01 No Action Taken I:\hanxiaojun\qq.rar\QQWG.EXE Generic Dropper(Trojan)
2008-2-6 20:51:01 No Action Taken I:\hanxiaojun\qq.rar\ATMQQ2.DLL Generic.dx(Trojan)
2008-2-6 20:51:01 No Action Taken I:\hanxiaojun\qq.rar\WW.EXE\WW.EXE\0000c0f0.EXE Generic.dx(Trojan

显示全部楼层 · 发表于 2008-2-6 21:39:50

A-Squared  Found Trojan-Dropper.Win32.Agent.wf
AntiVir  Found TR/Drop.Agent.WF.86, TR/PSW.QQpass.akc, TR/Agent.ekn
ArcaVir  Found Trojan.Dropper.Agent.Wf, Trojan.Psw.Qqpass.Akc, Trojan.Agent.Ekn, Trojan.Psw.Qqpass.Ajw
Avast  Found Win32:Agent-OWT, Win32:QQPass-OQ, Win32:Delf-DTW, Win32:QQPass-OU
AVG Antivirus  Found BackDoor.Hupigon3.AEUZ, PSW.Generic5.YHI, PSW.OnlineGames.SXC
BitDefender  Found Trojan.Dropper.RIL, Generic.PWStealer.E5371001, Generic.Malware.PV!bPk.54316A88, Dialer.Generic.10219
ClamAV  Found Trojan.Dropper-3144
CPsecure  Found nothing
Dr.Web  Found Trojan.PWS.Qqpass.1533, BACKDOOR.Trojan (probable variant)
F-Prot Antivirus  Found W32/Downloader.gen10
F-Secure Anti-Virus  Found Trojan-Dropper.Win32.Agent.wf, Trojan-PSW.Win32.QQPass.akc, Trojan.Win32.Agent.ekn, Trojan-PSW.Win32.QQPass.ajw
Fortinet  Found W32/Agent.WF!tr
Ikarus  Found Trojan-Dropper.Win32.Agent.WF, Trojan.Win32.BCB.m, Dialer
Kaspersky Anti-Virus  Found Trojan-Dropper.Win32.Agent.wf, Trojan-PSW.Win32.QQPass.akc, Trojan.Win32.Agent.ekn, Trojan-PSW.Win32.QQPass.ajw
NOD32  Found Win32/TrojanDropper.Agent.WF, probably a variant of Win32/Genetik (probable variant)
Norman Virus Control  Found nothing
Panda Antivirus  Found Trj/Multidropper.RHY
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/Generic-A, Mal/EncPk-AP, Mal/Dropper-H
VirusBuster  Found nothing
VBA32  Found Trojan-Dropper.Win32.Agent.wf, MalwareScope.Trojan-PSW.Game.7, Trojan-PSW.Win32.QQPass.ajw

显示全部楼层 · 发表于 2008-2-6 22:30:49

费尔报了四个

显示全部楼层 · 发表于 2008-2-6 22:42:25

信息 1998-02-06  22:42:19 您此次查毒共查出4个病毒以及危险代码
信息 1998-02-06  22:42:19 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件8个
信息 1998-02-06  22:42:19 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 1998-02-06  22:42:19 C:\Users\挪威的冬天\Desktop\qq.rar\ww.exe Win32.Packed.MaskPE 跳过，未处理
病毒 1998-02-06  22:42:19 C:\Users\挪威的冬天\Desktop\qq.rar\12345.dll Win32.Troj.Agent.347648 跳过，未处理
病毒 1998-02-06  22:42:19 C:\Users\挪威的冬天\Desktop\qq.rar\atmQQ2.dll Win32.Packed.MaskPE 跳过，未处理
病毒 1998-02-06  22:42:19 C:\Users\挪威的冬天\Desktop\qq.rar\QQwg.exe Win32.VirInstaller.Agent.wf.98304 跳过，未处理

[病毒样本] 盗Q的

本帖子中包含更多资源