样本一~~~~

显示全部楼层 · 发表于 2007-3-23 16:32:56

样本一~~~~

显示全部楼层 · 发表于 2007-3-23 16:35:20

卡巴...挂了

显示全部楼层 · 发表于 2007-3-23 16:35:40

--> ~tmp.exe
[DETECTION] Contains signature of the dropper DR/Delphi.Gen

显示全部楼层 · 发表于 2007-3-23 16:37:03

加壳了

显示全部楼层 · 发表于 2007-3-23 16:43:15

Antivirus Version Update Result
AhnLab-V3 2007.3.23.0 03.22.2007  no virus found
AntiVir 7.3.1.44 03.23.2007 TR/PSW.Steal.26542
Authentium 4.93.8 03.22.2007  no virus found
Avast 4.7.936.0 03.22.2007 Win32:Delf-BTP
AVG 7.5.0.447 03.22.2007  no virus found
BitDefender 7.2 03.23.2007 Generic.PWStealer.2957A869
CAT-QuickHeal 9.00 03.22.2007  no virus found
ClamAV devel-20070312 03.23.2007  no virus found
DrWeb 4.33 03.23.2007  no virus found
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
eTrust-Vet 30.6.3504 03.23.2007  no virus found
Ewido 4.0 03.22.2007  no virus found
FileAdvisor 1 03.23.2007  no virus found
Fortinet 2.85.0.0 03.23.2007  no virus found
F-Prot 4.3.1.45 03.23.2007  no virus found
F-Secure 6.70.13030.0 03.23.2007  no virus found
Ikarus T3.1.1.3 03.23.2007 Trojan-Spy.Win32.Delf.PG
Kaspersky 4.0.2.24 03.23.2007  no virus found
McAfee 4990 03.22.2007 PWS-QQGame
Microsoft 1.2306 03.23.2007  no virus found
NOD32v2 2138 03.23.2007  no virus found
Norman 5.80.02 03.22.2007  no virus found
Panda 9.0.0.4 03.22.2007 Suspicious file
Prevx1 V2 03.23.2007  no virus found
Sophos 4.15.0 03.23.2007  no virus found
Sunbelt 2.2.907.0 03.22.2007  no virus found
Symantec 10 03.23.2007  no virus found
TheHacker 6.1.6.080 03.23.2007  no virus found
UNA 1.83 03.16.2007  no virus found
VBA32 3.11.2 03.22.2007 MalwareScope.Backdoor.Hupigon.10

显示全部楼层 · 发表于 2007-3-23 16:49:44

~tmp.RAR

AntiVir 7.3.1.44 03.23.2007 TR/PSW.Steal.26542
Avast 4.7.936.0 03.22.2007 Win32:Delf-BTP
eSafe 7.0.14.0 03.22.2007 suspicious Trojan/Worm
Ikarus T3.1.1.3 03.23.2007 Trojan-Spy.Win32.Delf.PG
McAfee 4990 03.22.2007 PWS-QQGame
Panda 9.0.0.4 03.22.2007 Suspicious file
VBA32 3.11.2 03.22.2007 MalwareScope.Backdoor.Hupigon.10
Webwasher-Gateway 6.0.1 03.23.2007 Trojan.PSW.Steal.26542

显示全部楼层 · 发表于 2007-3-23 16:56:09

Cyberhawk

显示全部楼层 · 发表于 2007-3-23 18:11:30

扫描系统区域...
扫描所选择的目录和文件...
对象: ~tmp.exe
在压缩档案里: F:\新建文件夹 (4)\~tmp.rar
Status: 已发现病毒
病毒: Generic.PWStealer.2957A869 (BD 引擎)
对象: ~tmp.rar
路径: F:\新建文件夹 (4)
Status: 已发现病毒
病毒: Generic.PWStealer.2957A869 (BD 引擎)
扫描完成: 2007-3-23 18:11
已检查 1 个文件
已发现 1 个染毒文件

显示全部楼层 · 发表于 2007-3-23 19:41:02

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-QQGame (特洛伊病毒), PWS-QQGame (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\~tmp.exe

[病毒样本] 样本一~~~~

本帖子中包含更多资源

本帖子中包含更多资源