Kaspersky 7.0.0.125 2008.05.17 -

显示全部楼层 · 发表于 2008-5-17 16:30:27

附上样本

显示全部楼层 · 发表于 2008-5-17 16:30:55

AhnLab-V3 2008.5.16.0 2008.05.16 -
AntiVir 7.8.0.19 2008.05.17 TR/ATRAPS.Gen
Authentium 5.1.0.4 2008.05.17 -
Avast 4.8.1195.0 2008.05.17 Win32:OnLineGames-BSI
AVG 7.5.0.516 2008.05.16 -
BitDefender 7.2 2008.05.17 -
CAT-QuickHeal 9.50 2008.05.16 -
ClamAV 0.92.1 2008.05.17 -
DrWeb 4.44.0.09170 2008.05.17 Trojan.PWS.Qqpass.1972
eSafe 7.0.15.0 2008.05.16 -
eTrust-Vet 31.4.5796 2008.05.16 -
Ewido 4.0 2008.05.14 -
F-Prot 4.4.2.54 2008.05.16 -
F-Secure 6.70.13260.0 2008.05.17 Suspicious:W32/Malware!Gemini
Fortinet 3.14.0.0 2008.05.17 -
GData 2.0.7306.1023 2008.05.17 Win32:OnLineGames-BSI
Ikarus T3.1.1.26.0 2008.05.17 Trojan-PWS.Win32.Nilage.bga
Kaspersky 7.0.0.125 2008.05.17 -
McAfee 5297 2008.05.17 New Malware.bj
Microsoft 1.3408 2008.05.13 -
NOD32v2 3106 2008.05.16 a variant of Win32/PSW.QQPass.NDF
Norman 5.80.02 2008.05.16 -
Panda 9.0.0.4 2008.05.17 -
Prevx1 V2 2008.05.17 Malicious Software
Rising 20.44.51.00 2008.05.17 Trojan.PSW.Win32.QQPass.zfs
Sophos 4.29.0 2008.05.17 Mal/Behav-136
Sunbelt 3.0.1123.1 2008.05.17 -
Symantec 10 2008.05.17 -
TheHacker 6.2.92.311 2008.05.15 -
VBA32 3.12.6.6 2008.05.17 MalwareScope.Trojan-PSW.Game.7
VirusBuster 4.3.26:9 2008.05.16 -
Webwasher-Gateway 6.6.2 2008.05.17 Trojan.ATRAPS.Gen

显示全部楼层 · 发表于 2008-5-17 16:31:19

http://research.sunbelt-software.com/ViewMalware.aspx?id=4433322

sandbox report

显示全部楼层 · 发表于 2008-5-17 16:33:13

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\汶川地震灾情.rar<RAR>:汶川地震灾情.exe<DLLRES>:DLLFILE0.exe <- Trojan.Psw.Qqpass.Bpz : No action

显示全部楼层 · 发表于 2008-5-17 16:36:29

TO KL

[ 本帖最后由 wangjay1980 于 2008-5-17 16:38 编辑 ]

显示全部楼层 · 发表于 2008-5-17 17:28:54

标题有什么意思?

显示全部楼层 · 发表于 2008-5-17 18:39:28

C:\Documents and Settings\Administrator\桌面\汶川地震灾情.rar>>汶川地震灾情.exe TrojanPSW.QQPass.zfs.nuwx 木马还未处理

显示全部楼层 · 发表于 2008-5-17 18:42:02

真是不要脸！
编病毒的人真混蛋！
还用这种题目！！！
骗取善良的人们
！！！！

显示全部楼层 · 发表于 2008-5-17 20:34:41

Hello.
New malicious software was found in the attached file. Trojan-Dropper.Win32.Agent.rpp
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com
[:1:]

[病毒样本] Kaspersky 7.0.0.125 2008.05.17 -

本帖子中包含更多资源

ArcaVir2008

本帖子中包含更多资源