样本

显示全部楼层 · 发表于 2007-3-29 23:13:41

2007-3-29 23:18:57 已删除
E:\Downloads\34\34.exe\000052f0.EXE
PWS-QQPass.dll (特洛伊)

显示全部楼层 · 发表于 2007-3-29 23:15:37

金山Win32.Troj.Delf.PG.67214

显示全部楼层 · 发表于 2007-3-29 23:24:43

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-29
Start time: 2007-3-29 23:23
Engine(s): KAV engine (AVK 17.3611), BD-Engine (BD 17.5838)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 34.exe
In archive: D:\34.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.je (KAV engine), Trojan.Clicker.MMN (BD-Engine)
Object: 34.rar
Path: D:
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.je (KAV engine), Trojan.Clicker.MMN (BD-Engine)
Analysis complete: 2007-3-29 23:23
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-29 23:24:47

D:\Personal\Desktop\34.rar OK
D:\Personal\Desktop\34.rar=>34.exe Infected: Trojan.Clicker.MMN
D:\Personal\Desktop\34.rar=>34.exe Disinfection failed
D:\Personal\Desktop\34.rar=>34.exe Move failed

显示全部楼层 · 发表于 2007-3-30 00:55:45

detected: Trojan program Trojan-PSW.Win32.QQPass.je URL: http://bbs.kafan.cn/attachment.php?aid=49248//34.exe

显示全部楼层 · 发表于 2007-3-30 02:43:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\34.rar'
C:\Documents and Settings\morgan\My Documents\
  34.rar
[0] Archive type: RAR
--> 34.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UO
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-30 02:51:37

deleted: Trojan program Trojan-PSW.Win32.QQPass.je File: C:\Documents and Settings\Deric Yeoh\桌面\34.rar/34.exe

显示全部楼层 · 发表于 2007-3-30 03:17:42

Scan performed at: 2007-3-30 3:18:00
Scanning Log
NOD32 version 2154 (20070329) NT
Command line: C:\Documents and Settings\EQ2\桌面\34.rar
Operating memory - is OK

Date: 30.3.2007 Time: 03:18:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\34.rar
C:\Documents and Settings\EQ2\桌面\34.rar ?RAR ?34.exe - probably a variant of Win32/Spy.Delf.PG trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:18:04 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-30 09:52:13

[病毒样本] 样本

本帖子中包含更多资源

KIS

启发式继续报

本帖子中包含更多资源