样本~~

显示全部楼层 · 发表于 2007-3-26 00:29:04

金山Win32.Hack.Jusi.i.125536

显示全部楼层 · 发表于 2007-3-26 01:19:43

Cyberhawk

显示全部楼层 · 发表于 2007-3-26 01:20:37

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Install.rar'
C:\Documents and Settings\morgan\My Documents\
  Install.rar
[0] Archive type: RAR
--> Install.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-26 02:47:15

Scan performed at: 2007-3-26 2:47:32
Scanning Log
NOD32 version 2144 (20070325) NT
Command line: C:\Documents and Settings\EQ2\桌面\Install.rar
Operating memory - is OK

Date: 26.3.2007 Time: 02:47:36
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Install.rar
C:\Documents and Settings\EQ2\桌面\Install.rar ?RAR ?Install.exe - a variant of Win32/PSW.QQRob.NAQ trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 02:47:36 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-26 03:39:52

2007-3-25 12:37:02 已由访问保护规则禁止 MT-16D974393A12\wynn C:\Documents and Settings\wynn\My Documents\Install.exe C:\WINDOWS\system32\RpcS.exe 通用最大保护:禁止在 Windows 文件夹中创建新的可执行文件已阻止的操作: 创建

显示全部楼层 · 发表于 2007-3-26 13:02:56

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-25
Start time: 2007-3-26 13:02
Engine(s): KAV engine (AVK 17.3527), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: Install.exe
In archive: C:\Documents and Settings\Administrator\桌面\Install.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQRob.lg (KAV engine), MemScan:Trojan.PWS.QQPass.MN (BD-Engine)
Object: Install.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.QQRob.lg (KAV engine), MemScan:Trojan.PWS.QQPass.MN (BD-Engine)
Analysis complete: 2007-3-26 13:02
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-26 13:17:12

FS7.0
Result: 1 malware found
Trojan-PSW.Win32.QQRob.lg (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Install.rar\Install.exe

显示全部楼层 · 发表于 2007-3-26 13:49:43

卡巴报警...

显示全部楼层 · 发表于 2007-3-26 13:59:26

杀掉了

[病毒样本] 样本~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源