QQ空间小秘书有恶意代码

譕钶取玳

QQ空间小秘书.exe/Yoda Windows Explorer 已检测到: Multi.Packed

小邪邪

晕，这是标准的报壳

huai168an

反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.6.18.0 2008.06.17 -
AntiVir 7.8.0.55 2008.06.17 -
Authentium 5.1.0.4 2008.06.18 -
Avast 4.8.1195.0 2008.06.17 -
AVG 7.5.0.516 2008.06.17 Win32/PEStealth
BitDefender 7.2 2008.06.18 -
CAT-QuickHeal 9.50 2008.06.17 (Suspicious) - DNAScan
ClamAV 0.93.1 2008.06.18 Worm.Mytob.Crypt.Gen
DrWeb 4.44.0.09170 2008.06.17 -
eSafe 7.0.15.0 2008.06.17 suspicious Trojan/Worm
eTrust-Vet 31.6.5881 2008.06.17 -
Ewido 4.0 2008.06.17 -
F-Prot 4.4.4.56 2008.06.18 -
F-Secure 6.70.13260.0 2008.06.18 -
Fortinet 3.14.0.0 2008.06.17 -
GData 2.0.7306.1023 2008.06.18 -
Ikarus T3.1.1.26.0 2008.06.18 Trojan-Downloader.Win32.Banload.AF
Kaspersky 7.0.0.125 2008.06.18 -
McAfee 5319 2008.06.17 -
Microsoft 1.3604 2008.06.18 -
NOD32v2 3195 2008.06.17 -
Norman 5.80.02 2008.06.17 -
Panda 9.0.0.4 2008.06.18 Suspicious file
Prevx1 V2 2008.06.18 Malicious Software
Rising 20.49.12.00 2008.06.17 -
Sophos 4.30.0 2008.06.18 Mal/HckPk-D
Sunbelt 3.0.1153.1 2008.06.15 -
Symantec 10 2008.06.18 -
TheHacker 6.2.92.354 2008.06.18 W32/Behav-Heuristic-073
TrendMicro 8.700.0.1004 2008.06.17 -
VBA32 3.12.6.7 2008.06.17 -
VirusBuster 4.3.26:9 2008.06.12 Packed/Yoda
Webwasher-Gateway 6.6.2 2008.06.18 Win32.Malware.gen (suspicious)
33报11，还是注意点好

2008-6-18 12:05:47        http://bbs.kafan.cn/attachment.p ... mp;t=1213761440//QQ空间小秘书.exe//Yoda        Thunder        已检测到: Multi.Packed               
2008-6-18 12:05:47        http://bbs.kafan.cn/attachment.p ... mp;t=1213761440//QQ空间小秘书.exe//Yoda        Thunder        拒绝: Multi.Packed               
2008-6-18 12:05:47        http://bbs.kafan.cn/attachment.p ... mp;t=1213761440//QQ空间小秘书.exe//Yoda        Thunder        已检测到: Multi.Packed               
2008-6-18 12:05:47        http://bbs.kafan.cn/attachment.p ... mp;t=1213761440//QQ空间小秘书.exe//Yoda        Thunder        拒绝: Multi.Packed

尽在不言中

qianwenxiang

貌似只是在报壳 avast pass

qigang

仅是报壳，勿慌。