金山报3

kp2006

快杀

[ 本帖最后由 kp2006 于 2007-3-8 16:07 编辑 ]

The EQs

Scan performed at: 2007-3-8 16:06:54
Scanning Log
NOD32 version 2101 (20070307) NT
Command line: C:\Documents and Settings\EQ2\桌面\wc.rar
Operating memory - is OK

Date: 8.3.2007  Time: 16:06:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wc.rar
C:\Documents and Settings\EQ2\桌面\wc.rar ?RAR ?1[1].exe - probably a variant of Win32/PSW.QQPass.NBL trojan
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:07:00 Total scanning time: 1 sec (00:00:01)

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-8 16:18
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1[1].exe
        In archive: C:\Documents and Settings\Administrator\桌面\wc.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.QQPass.uv (KAV engine), Generic.PWStealer.F82FE48A (BD-Engine)
Object: wc.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.QQPass.uv (KAV engine), Generic.PWStealer.F82FE48A (BD-Engine)
Object: ytynaf.dll
        In archive: C:\Documents and Settings\Administrator\桌面\wcs.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.QQPass.uv (KAV engine), Generic.PWStealer.23D0F893 (BD-Engine)
Object: wc[1].exe
        In archive: C:\Documents and Settings\Administrator\桌面\wcs.rar
        Status: Virus detected
        Virus: Backdoor.Win32.Hupigon.gs (KAV engine)
Object: wcs.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.QQPass.uv, Backdoor.Win32.Hupigon.gs (KAV engine), Generic.PWStealer.23D0F893 (BD-Engine)
Analysis complete: 2007-3-8 16:18
    2 files checked
    2 infected files detected
    0 suspected files detected

The EQs

Scan performed at: 2007-3-8 16:21:36
Scanning Log
NOD32 version 2101 (20070307) NT
Command line: C:\Documents and Settings\EQ2\桌面\wcs.rar
Operating memory - is OK

Date: 8.3.2007  Time: 16:21:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wcs.rar
C:\Documents and Settings\EQ2\桌面\wcs.rar ?RAR ?ytynaf.dll - Win32/PSW.QQPass.JF trojan - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:21:40 Total scanning time: 0 sec (00:00:00)

soul20010

FS7.0
Result: 3 malware found
Trojan-PSW.Win32.QQPass.uv (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wc.rar\1[1].exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wcs.rar\ytynaf.dll
Backdoor.Win32.Hupigon.gs (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wcs.rar\wc[1].exe

鼻耳盖子

shmily512099

微点报警了。。。。。。。

zxy900906

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\wcs.rar'
C:\Documents and Settings\user\桌面\wcs.rar
  [0] Archive type: RAR
  --> ytynaf.dll
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.UV
  --> wc[1].exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.GS.346 Backdoor server programs
      [INFO]      A backup was created as '4662e105.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\user\桌面\wc.rar'
C:\Documents and Settings\user\桌面\wc.rar
  [0] Archive type: RAR
  --> 1[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.UV.1
      [INFO]      A backup was created as '461de105.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!