可疑度99%

显示全部楼层 · 发表于 2009-7-28 16:01:32

在qq安装目录下，隐藏文件。ris2010发现Trojan.Win32.Generic.11E99175，顺带上报多引擎的结果。

a-squared	4.5.0.24	2009.07.28	Win32.SuspectCrc!IK
AhnLab-V3	5.0.0.2	2009.07.28	-
AntiVir	7.9.0.228	2009.07.28	-
Antiy-AVL	2.0.3.7	2009.07.28	-
Authentium	5.1.2.4	2009.07.27	-
Avast	4.8.1335.0	2009.07.27	Win32:Trojan-gen {Other}
AVG	8.5.0.387	2009.07.27	PSW.Agent.ABBX
BitDefender	7.2	2009.07.28	-
CAT-QuickHeal	10.00	2009.07.28	-
ClamAV	0.94.1	2009.07.28	-
Comodo	1791	2009.07.28	-
DrWeb	5.0.0.12182	2009.07.28	-
eSafe	7.0.17.0	2009.07.27	Win32.GenericPWS.y.S
eTrust-Vet	31.6.6642	2009.07.27	-
F-Prot	4.4.4.56	2009.07.27	-
F-Secure	8.0.14470.0	2009.07.28	-
Fortinet	3.120.0.0	2009.07.27	-
GData	19	2009.07.28	Win32:Trojan-gen {Other}
Ikarus	T3.1.1.64.0	2009.07.28	Win32.SuspectCrc
Jiangmin	11.0.800	2009.07.28	-
K7AntiVirus	7.10.803	2009.07.27	-
Kaspersky	7.0.0.125	2009.07.28	-
McAfee	5690	2009.07.27	Generic PWS.y!hv.s
McAfee+Artemis	5690	2009.07.27	Generic PWS.y!hv.s
McAfee-GW-Edition	6.8.5	2009.07.28	Heuristic.BehavesLike.Win32.AdSpyware.L
Microsoft	1.4903	2009.07.28	-
NOD32	4283	2009.07.28	-
Norman	6.01.09	2009.07.27	W32/Agent.gen.3246503
nProtect	2009.1.8.0	2009.07.28	-
Panda	10.0.0.14	2009.07.27	Trj/CI.A
PCTools	4.4.2.0	2009.07.27	-
Prevx	3.0	2009.07.28	High Risk Worm
Rising	21.40.11.00	2009.07.28	-
Sophos	4.44.0	2009.07.28	-
Sunbelt	3.2.1858.2	2009.07.28	-
Symantec	1.4.4.12	2009.07.28	-
TheHacker	6.3.4.3.375	2009.07.28	-
TrendMicro	8.950.0.1094	2009.07.28	-
VBA32	3.12.10.9	2009.07.28	-
ViRobot	2009.7.28.1856	2009.07.28	-
VirusBuster	4.6.5.0	2009.07.27	-

显示全部楼层 · 发表于 2009-7-28 16:46:54

確實惡意

TO DW

显示全部楼层 · 发表于 2009-7-28 16:48:25

RIS2010

Trojan.Win32.Generic.11E99175

显示全部楼层 · 发表于 2009-7-28 16:49:54

TO Avira

显示全部楼层 · 发表于 2009-7-28 16:50:13

File ID  Filename Size (Byte) Result
25412726  Wsock32.rar 15.5 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25389730  Wsock32.dll  52 KB  CLEAN

显示全部楼层 · 发表于 2009-7-28 16:50:18

显示全部楼层 · 发表于 2009-7-28 17:13:50

瑞星2010
Trojan.Win32.Generic.11E99175

显示全部楼层 · 发表于 2009-7-28 21:32:06

费尔和小A豆报了加壳木马

显示全部楼层 · 发表于 2009-7-28 21:52:06

过金山毒霸极速版

显示全部楼层 · 发表于 2009-7-28 22:57:15

To KL

[病毒样本] 可疑度99%

本帖子中包含更多资源

本帖子中包含更多资源