样本,江民杀

stevenji2000

从老爸电脑取的,给分析下

龙井茶

NOD有两个是示知道,共查出三个.

龙井茶

有两个是未知.

The EQs

Scan performed at: 2007-3-30 18:49:54
Scanning Log
NOD32 version 2157 (20070330) NT
Command line: C:\Documents and Settings\EQ2\桌面\Internet_Explorer.rar
Operating memory - is OK

Date: 30.3.2007  Time: 18:50:00
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Internet_Explorer.rar
C:\Documents and Settings\EQ2\桌面\Internet_Explorer.rar ?RAR ?MoWang.tdm - probably a variant of Win32/Spy.Delf.PG trojan
C:\Documents and Settings\EQ2\桌面\Internet_Explorer.rar ?RAR ?06[1].exe - probably a variant of Win32/Spy.Delf.PG trojan
C:\Documents and Settings\EQ2\桌面\Internet_Explorer.rar ?RAR ?MoWang.sys - probably a variant of Win32/Spy.Delf.PG trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 18:50:00 Total scanning time: 0 sec (00:00:00)

剑指七星

已检测到: 木马程序 Trojan-PSW.Win32.QQGame.k        文件: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\E8UHVDKC\Internet Explorer[1].rar\MoWang.tdm
已检测到: 木马程序 Trojan-PSW.Win32.QQPass.je        文件: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\E8UHVDKC\Internet Explorer[1].rar\06[1].exe
已检测到: 木马程序 Trojan-PSW.Win32.QQPass.je        文件: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\E8UHVDKC\Internet Explorer[1].rar\MoWang.sys

小邪邪

咖啡也通杀，3个特洛伊

The EQs

没过瑞星

soul20010

FS7.0
Result: 3 malware found
Trojan-PSW.Win32.QQGame.k (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Internet_Explorer.rar\MoWang.tdm
Trojan-PSW.Win32.QQPass.je (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Internet_Explorer.rar\06[1].exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Internet_Explorer.rar\MoWang.sys

风野胤

原帖由 EQ2 于 2007-3-30 18:57 发表
没过瑞星

这样不好吧
还特地说没过瑞星

gggh

卡巴报警...