查看: 2576|回复: 8
收起左侧

[病毒样本] 小红伞又把QQ给杀了!

[复制链接]
蓝色牛仔裤
发表于 2007-3-10 10:04:08 | 显示全部楼层 |阅读模式
今天早上刚升级完红伞, 打开C盘的时候就报警了:是AD

AntivirusVersionUpdateResult
AntiVir7.3.1.4103.09.2007ADSPY/QQHelper.15
Authentium4.93.803.09.2007 [td]no virus found
Avast4.7.936.003.09.2007 [td]no virus found
AVG7.5.0.44703.09.2007 [td]no virus found
BitDefender7.203.10.2007 [td]no virus found
CAT-QuickHeal9.0003.09.2007 [td]no virus found
ClamAVdevel-2006042603.10.2007 [td]no virus found
DrWeb4.3303.09.2007 [td]no virus found
eSafe7.0.14.003.08.2007 [td]no virus found
eTrust-Vet30.6.346703.09.2007 [td]no virus found
Ewido4.003.09.2007 [td]no virus found
FileAdvisor103.10.2007 [td]no virus found
Fortinet2.85.0.003.09.2007 [td]no virus found
F-Prot4.3.1.4503.09.2007 [td]no virus found
F-Secure6.70.13030.003.09.2007 [td]no virus found
IkarusT3.1.1.303.09.2007 [td]no virus found
Kaspersky4.0.2.2403.10.2007 [td]no virus found
McAfee498103.09.2007 [td]no virus found
Microsoft1.220403.10.2007 [td]no virus found
NOD32v2210503.09.2007 [td]no virus found
Norman5.80.0203.09.2007 [td]no virus found
Panda9.0.0.403.09.2007 [td]no virus found
Prevx1V203.10.2007 [td]no virus found
Sophos4.15.003.09.2007 [td]no virus found
Sunbelt2.2.907.003.10.2007 [td]no virus found
Symantec1003.10.2007 [td]no virus found
TheHacker6.1.6.07303.09.2007 [td]no virus found
UNA1.8303.09.2007 [td]no virus found
VBA323.11.203.10.2007 [td]no virus found
VirusBuster4.3.19:903.09.2007 [td]no virus found

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Giggs
发表于 2007-3-10 10:19:27 | 显示全部楼层
已经提交给红伞咯,等回复吧~
mofunzone
发表于 2007-3-10 11:05:49 | 显示全部楼层
我又做坏事了。。
Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00015946.



We received the following archive files:File ID         Filename         Size (Byte)        Result
218617         My Documents.rar        185.156        OK


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
218494         mppds.dll         8.192         MALWARE
218504         rwda.dll         126.976         MALWARE
218496         QQZoneHelper.dll         155.648         MALWARE
218504         rwda.dll         126.976         MALWARE
216073         upxdnd.dll         7.168         MALWARE (NOT ANALYZABLE)
207448         npf.sys         32.512         MALWARE (NOT ANALYZABLE)



Please find a detailed report concerning each individual sample below: Filename        Result         mppds.dll         MALWARE


The file 'mppds.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.  Filename        Result         rwda.dll         MALWARE


The file 'rwda.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is an adware or spyware program. Detection will be added to our virus definition file (VDF) with one of the next updates.  Filename        Result         QQZoneHelper.dll         MALWARE


The file 'QQZoneHelper.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is an adware or spyware program. Detection will be added to our virus definition file (VDF) with one of the next updates.  Filename        Result         rwda.dll         MALWARE


The file 'rwda.dll' has been determined to be 'MALWARE'. Our analysts discovered that the file is an adware or spyware program. Detection will be added to our virus definition file (VDF) with one of the next updates.  Filename        Result         upxdnd.dll         MALWARE (NOT ANALYZABLE)


The file 'upxdnd.dll' has been determined to be 'MALWARE (NOT ANALYZABLE)'. In particular this means that this file is not working properly or not functional as a stand alone component. Nevertheless we were able to determine that it is malware. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.  Filename        Result         npf.sys         MALWARE (NOT ANALYZABLE)


The file 'npf.sys' has been determined to be 'MALWARE (NOT ANALYZABLE)'. In particular this means that this file is not working properly or not functional as a stand alone component. Nevertheless we were able to determine that it is malware. Our analysts discovered that the file is a Security Privacy Risk (SPR). In particular it means that it is a program that might possibly be able to affect the security of your system, might trigger activities you might not want or might violate your privacy. Detection will be added to our virus definition file (VDF) with one of the next updates.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... mp;incidentid=15946
蓝色牛仔裤
 楼主| 发表于 2007-3-10 11:17:21 | 显示全部楼层
不管误报不误报了, 反正无关痛痒, 把它删了, 省事~呵呵`
欠妳緈諨
发表于 2007-3-10 12:21:08 | 显示全部楼层
我的红伞升级到6.38.00.32,没有报啊 ,我是传美QQ2007BATA1
蓝色牛仔裤
 楼主| 发表于 2007-3-10 12:51:27 | 显示全部楼层
楼上的是否P版? C版不杀广告间谍的~
傻猪猪米走鸡
发表于 2007-3-10 12:53:27 | 显示全部楼层
avg也报木马啊
欠妳緈諨
发表于 2007-3-10 13:06:46 | 显示全部楼层
是P版啊,难道我QQ里没有这个文件
bridgewr
发表于 2007-3-10 16:09:17 | 显示全部楼层
误报
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-4-30 07:21 , Processed in 0.118601 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表