样本~~~

tonger2003

1

The EQs

Scan performed at: 2007-4-3 14:49:40
Scanning Log
NOD32 version 2165 (20070403) NT
Command line: C:\Documents and Settings\EQ2\桌面\pp[1].rar
Operating memory - is OK

Date: 3.4.2007  Time: 14:49:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\pp[1].rar
C:\Documents and Settings\EQ2\桌面\pp[1].rar ?RAR ?pp[1].exe - a variant of Win32/PSW.QQShou.NAU trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:49:43 Total scanning time: 0 sec (00:00:00)

蓝色牛仔裤

pp[1].rar\pp[1].exe;C:\Documents and Settings\Administrator\桌面\pp[1].rar;BINARYRES;;
pp[1].rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\pp[1].rar'
C:\Documents and Settings\morgan\My Documents\
  pp[1].rar
    [0] Archive type: RAR
    --> pp[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.Stealer.73346
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-1
Start time: 2007-4-3 15:17
Engine(s): KAV engine (AVK 17.3690), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: pp[1].exe
        In archive: C:\Documents and Settings\Administrator\桌面\pp[1].rar
        Status: Virus detected
        Virus: DeepScan:Generic.PWStealer.E4779B33 (BD-Engine)
Object: pp[1].rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: DeepScan:Generic.PWStealer.E4779B33 (BD-Engine)
Analysis complete: 2007-4-3 15:17
    1 files checked
    1 infected files detected
    0 suspected files detected

小邪邪

mcafee可真行，不报

鼻耳盖子

C:\PROGRAM FILES\SYSINFO.WMP I:\TEST\070403\9\PP[1]\PP[1].EXE