qqhelp家族的

显示全部楼层 · 发表于 2008-4-8 06:14:53

伪装成图片。。。。

显示全部楼层 · 发表于 2008-4-8 06:34:40

无语了这个log

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\桌面.zip'
C:\Documents and Settings\Administrator\My Documents\
  桌面.zip
[0] Archive type: ZIP
   --> logo(1).jpg
      [1] Archive type: Runtime Packed
      --> Object
   --> logo(2).jpg
      [1] Archive type: Runtime Packed
      --> Object
   --> logo(3).jpg
      [1] Archive type: Runtime Packed
      --> Object
   --> logo.jpg
      [1] Archive type: Runtime Packed
      --> Object
   [WARNING] The file was ignored!
  桌面.zip:Zone.Identifier

End of the scan: 2008年4月7日  15:34
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   6 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-8 06:34:59

The file 'C:\Documents and Settings\Administrator\My Documents\桌面.zip'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was ignored!

显示全部楼层 · 发表于 2008-4-8 06:39:58

Starting the file scan:

Begin scan in 'E:\桌面.zip'
E:\桌面.zip
  [0] Archive type: ZIP
  --> logo(1).jpg
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> logo(2).jpg
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> logo(3).jpg
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> logo.jpg
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-8 08:06:17

D:\Documents and Settings\EKINCHENG\桌面\桌面.zip » ZIP » logo(1).jpg - probably a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
D:\Documents and Settings\EKINCHENG\桌面\桌面.zip » ZIP » logo(2).jpg - probably a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
D:\Documents and Settings\EKINCHENG\桌面\桌面.zip » ZIP » logo(3).jpg - probably a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
D:\Documents and Settings\EKINCHENG\桌面\桌面.zip » ZIP » logo.jpg - probably a variant of Win32/TrojanDownloader.QQHelper.NDW trojan

显示全部楼层 · 发表于 2008-4-8 11:10:53

都是一样的

显示全部楼层 · 发表于 2008-4-8 12:08:44

都是这个 Dropper.Farfli.a.wifz

显示全部楼层 · 发表于 2008-4-8 12:15:13

Hello,

logo.jpg - Trojan-Downloader.Win32.Hmir.bsh

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-4-8 12:25:20

金山 0

显示全部楼层 · 发表于 2008-4-8 13:25:13

C:\Documents and Settings\Administrator\桌面\桌面.zip>>logo(1).jpg Dropper.Farfli.a.wifz 病毒还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>logo(2).jpg Dropper.Farfli.a.wifz 病毒还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>logo(3).jpg Dropper.Farfli.a.wifz 病毒还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>logo.jpg Dropper.Farfli.a.wifz 病毒还未处理

[病毒样本] qqhelp家族的

本帖子中包含更多资源