QQ被盗跟这有关么？

显示全部楼层 · 发表于 2008-3-10 12:41:48

昨天QQ不知道被谁盗了，我电脑里面就这个提示有毒。

我用的是小红伞P版的。大虾帮忙看看哈

显示全部楼层 · 发表于 2008-3-10 12:49:13

貌似误报，只是个修改TCPIP.SYS的工具而已

显示全部楼层 · 发表于 2008-3-10 12:50:58

金山 MISS

显示全部楼层 · 发表于 2008-3-10 12:52:05

哦，这样子啊。

那就怪了，我Q怎么被盗了呢？

显示全部楼层 · 发表于 2008-3-10 12:59:20

估计还有其他木马没找出来.你红伞开高启了吗?

显示全部楼层 · 发表于 2008-3-10 13:06:09

要怪就怪自己不会用吧

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\patch_cmd.rar'
C:\Documents and Settings\Administrator\My Documents\
  patch_cmd.rar
[0] Archive type: RAR
--> patch_cmd.exe
      [DETECTION] Contains detection pattern of the SPR/Dldr.MTW.1 program
   [WARNING] The file was ignored!
  patch_cmd.rar:Zone.Identifier

显示全部楼层 · 发表于 2008-3-10 13:48:09

Antivirus Version Last Update Result
AhnLab-V3 2008.3.4.0 2008.03.07 -
AntiVir 7.6.0.73 2008.03.09 SPR/Dldr.MTW.1
Authentium 4.93.8 2008.03.07 -
Avast 4.7.1098.0 2008.03.09 Win32:Spyware-gen
AVG 7.5.0.516 2008.03.09 -
BitDefender 7.2 2008.03.10 -
CAT-QuickHeal 9.50 2008.03.08 -
ClamAV 0.92.1 2008.03.09 -
DrWeb 4.44.0.09170 2008.03.09 -
eSafe 7.0.15.0 2008.03.09 suspicious Trojan/Worm
eTrust-Vet 31.3.5597 2008.03.07 -
Ewido 4.0 2008.03.09 -
FileAdvisor 1 2008.03.10 -
Fortinet 3.14.0.0 2008.03.10 -
F-Prot 4.4.2.54 2008.03.09 -
F-Secure 6.70.13260.0 2008.03.10 -
Ikarus T3.1.1.20 2008.03.10 -
Kaspersky 7.0.0.125 2008.03.10 -
McAfee 5247 2008.03.07 -
Microsoft 1.3301 2008.03.07 -
NOD32v2 2933 2008.03.10 -
Norman 5.80.02 2008.03.07 -
Panda 9.0.0.4 2008.03.09 Suspicious file
Prevx1 V2 2008.03.10 -
Rising 20.34.62.00 2008.03.09 -
Sophos 4.27.0 2008.03.10 -
Sunbelt 3.0.930.0 2008.03.05 -
Symantec 10 2008.03.10 -
TheHacker 6.2.92.239 2008.03.09 -
VBA32 3.12.6.2 2008.03.05 -
VirusBuster 4.3.26:9 2008.03.09 -
Webwasher-Gateway 6.6.2 2008.03.09 Riskware.Dldr.MTW.1

楼上确定不是误报?我开EQ没看出什么动作

显示全部楼层 · 发表于 2008-3-10 15:03:52

无不误报，上报KL

结论
Hello.
No malicious software was found in the attached file.
-----------------
Regards, Vladimir Krylov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: patch_cmd.rar

[ 本帖最后由 wangjay1980 于 2008-3-10 17:09 编辑 ]

显示全部楼层 · 发表于 2008-3-10 15:30:26

费尔飘……

显示全部楼层 · 发表于 2008-3-10 15:33:39

兄弟红伞没开高启发还是设置问题
我和6楼兄弟都报了
Begin scan in 'F:\Virus\patch_cmd.rar'
F:\Virus\patch_cmd.rar
  [0] Archive type: RAR
  --> patch_cmd.exe
   [DETECTION] Contains detection pattern of the SPR/Dldr.MTW.1 program
   [INFO]    The file was deleted!

[病毒样本] QQ被盗跟这有关么？

本帖子中包含更多资源