费尔真好

显示全部楼层 · 发表于 2007-3-12 03:13:37

他的功能可以

动态防御在线扫描功能报一木马

kv未知报中度可疑

DLL 注入程序: C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys
产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名
危险级别: 中
级别评分: 47.280b0
状态: 等待处理
在线扫描发现它是一个“木马”，推荐删除

[ 本帖最后由 kp2006 于 2007-3-12 03:39 编辑 ]

显示全部楼层 · 发表于 2007-3-12 03:16:58

Scan performed at: 2007-3-12 3:16:57
Scanning Log
NOD32 version 2107 (20070311) NT
Command line: C:\Documents and Settings\EQ2\桌面\SystemKb.rar
Operating memory - is OK

Date: 12.3.2007 Time: 03:17:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\SystemKb.rar
C:\Documents and Settings\EQ2\桌面\SystemKb.rar ?RAR ?SystemKb.sys - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:17:04 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-12 03:34:27

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-11
Start time: 2007-3-12 3:34
Engine(s): KAV engine (AVK 17.3208), BD-Engine (BD 17.2388)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: SystemKb.sys
In archive: C:\Documents and Settings\Administrator\桌面\SystemKb.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.mq (KAV engine), Generic.PWStealer.7FFF5C27 (BD-Engine)
Object: SystemKb.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.QQPass.mq (KAV engine), Generic.PWStealer.7FFF5C27 (BD-Engine)
Analysis complete: 2007-3-12 3:34
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-12 07:19:09

驱逐舰不报~

显示全部楼层 · 发表于 2007-3-12 07:24:01

Starting the file scan:

Begin scan in 'D:\SystemKb.rar'
D:\SystemKb.rar
  [0] Archive type: RAR
  --> SystemKb.sys
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.MQ.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-12 10:50:11

费尔确实是这样，有时右键扫描不报并不说明能逃过其动态防御

显示全部楼层 · 发表于 2007-3-12 10:50:25

卡巴

显示全部楼层 · 发表于 2007-3-12 19:18:18

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-QQPass (特洛伊病毒), PWS-QQPass (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\SystemKb.sys

显示全部楼层 · 发表于 2007-3-12 23:46:42

一个sys，不确定时病毒，上报微点去

显示全部楼层 · 发表于 2007-3-13 04:56:56

avast!过

费尔真好

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块