样本一个

显示全部楼层 · 发表于 2007-3-23 15:23:48

样本一个

显示全部楼层 · 发表于 2007-3-23 15:28:10

Scan performed at: 2007-3-23 15:28:23
Scanning Log
NOD32 version 2138 (20070323) NT
Command line: C:\Documents and Settings\EQ2\桌面\rising706.rar
Operating memory - is OK

Date: 23.3.2007 Time: 15:28:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\rising706.rar
C:\Documents and Settings\EQ2\桌面\rising706.rar ?RAR ?rising706.exe - probably a variant of Win32/Spy.Delf.PG trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:28:27 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-23 15:40:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\rising706.rar'
C:\Documents and Settings\morgan\My Documents\
  rising706.rar
[0] Archive type: RAR
--> rising706.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UO
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-23 15:41:50

AntiVir 7.3.1.44 03.22.2007 TR/Spy.Delf.UO
Avast 4.7.936.0 03.22.2007 Win32:Delf-DRV
AVG 7.5.0.447 03.22.2007 PSW.Generic3.KOM
BitDefender 7.2 03.23.2007 Dropped:Generic.Malware.Fdldsp.29D3AFDF
DrWeb 4.33 03.23.2007 Trojan.PWS.Qqshou
Fortinet 2.85.0.0 03.23.2007 QQPass!tr.pws
Ikarus T3.1.1.3 03.23.2007 Trojan-PWS.Win32.Delf.JS
McAfee 4990 03.22.2007 PWS-QQPass.dll
NOD32v2 2138 03.23.2007 probably a variant of Win32/Spy.Delf.PG
Panda 9.0.0.4 03.22.2007 Trj/QQPass.VM
Symantec 10 03.23.2007 Trojan.Adclicker
VBA32 3.11.2 03.22.2007 MalwareScope.Backdoor.Hupigon.10
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.Spy.Delf.UO

显示全部楼层 · 发表于 2007-3-23 17:17:40

DLL注入+自行复制，Cyberhawk杀

显示全部楼层 · 发表于 2007-3-23 18:06:11

扫描系统区域...
扫描所选择的目录和文件...
对象: rising706.exe
在压缩档案里: F:\新建文件夹 (4)\rising706.rar
Status: 可疑病毒
病毒: Dropped:Generic.Malware.Fdldsp.29D3AFDF (BD 引擎)
对象: rising706.rar
路径: F:\新建文件夹 (4)
Status: 可疑病毒
病毒: Dropped:Generic.Malware.Fdldsp.29D3AFDF (BD 引擎)
扫描完成: 2007-3-23 18:06
已检查 1 个文件
已发现 0 个染毒文件
发现 1 个可疑文件

显示全部楼层 · 发表于 2007-3-23 19:42:57

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-QQPass.dll (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\rising706.exe

显示全部楼层 · 发表于 2007-3-23 20:23:59

卡巴就这样飘过了..

显示全部楼层 · 发表于 2007-3-23 21:21:57

卡巴过了

显示全部楼层 · 发表于 2007-3-24 00:16:59

咖啡总算报了一个

[病毒样本] 样本一个

本帖子中包含更多资源

本帖子中包含更多资源