下载者木马 ~~卡巴飞过~~~~

tonger2003

下载者木马 ~~卡巴飞过~~~~

mofunzone

avast
http://bbs.kafan.cn/attachment.php?aid=44962\下载者木马.exe\[UPX]
Win32:QQShou-AS [Trj]
特洛伊木马
000725-0, 2007-03-19

[ 本帖最后由 mofunzone 于 2007-3-18 23:40 编辑 ]

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-14
Start time: 2007-3-19 15:34
Engine(s): KAV engine (AVK 17.3277), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 下载者木马.exe
        In archive: C:\Documents and Settings\Administrator\桌面\下载者木马.rar
        Status: Virus detected
        Virus: Generic.Malware.SBdld.63787F1B (BD-Engine)
Object: 下载者木马.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Generic.Malware.SBdld.63787F1B (BD-Engine)
Analysis complete: 2007-3-19 15:34
    1 files checked
    1 infected files detected
    0 suspected files detected

beat2

Starting the file scan:

Begin scan in 'D:\work area\下载者木马.rar'
D:\work area\下载者木马.rar
  [0] Archive type: RAR
  --> ÏÂÔØÕßľÂí.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      A backup was created as 'c603cc49.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

allenhippo

norton也飘过

红伞解压前报DR/Delphi.Gen，解开后报启发

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-14
Start time: 2007-3-19 15:38
Engine(s): KAV engine (AVK 17.3277), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 下载者木马_unpacked.exe
        In archive: C:\Documents and Settings\Administrator\桌面\下载者木马_unpacked.zip
        Status: Virus detected
        Virus: BehavesLike:Trojan.ShellHook (BD-Engine)
Object: 下载者木马_unpacked.zip
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: BehavesLike:Trojan.ShellHook (BD-Engine)
Analysis complete: 2007-3-19 15:38
    1 files checked
    1 infected files detected
    0 suspected files detected

The EQs

Scan performed at: 2007-3-19 15:45:18
Scanning Log
NOD32 version 2125 (20070318) NT
Command line: C:\Documents and Settings\EQ2\桌面\下载者木马.rar
Operating memory - is OK

Date: 19.3.2007  Time: 15:45:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\下载者木马.rar
C:\Documents and Settings\EQ2\桌面\下载者木马.rar ?RAR ?下载者木马.exe - a variant of Win32/PSW.QQShou trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:45:23 Total scanning time: 0 sec (00:00:00)

Nblock

。

[ 本帖最后由 Nblock 于 2007-3-19 16:02 编辑 ]

kp2006

kv不报

wangmark

驱逐舰不报，看样子驱逐舰对新病毒不感冒。