最新免杀QQ盗号木马

显示全部楼层 · 发表于 2007-4-25 20:16:27

R.T.

显示全部楼层 · 发表于 2007-4-25 20:17:31

Scan performed at: 2007-4-25 20:17:05
Scanning Log
NOD32 version 2217 (20070425) NT
Command line: E:\QQ2007.rar
Operating memory - is OK

Date: 25.4.2007 Time: 20:17:16
Anti-Stealth technology is enabled.
Scanned disks, folders and files: E:\QQ2007.rar
E:\QQ2007.rar ?RAR ?QQ2007.exe - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 20:17:19 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-4-25 20:20:15

Nod322.7查得出
怎么我的ESS查不出？

显示全部楼层 · 发表于 2007-4-25 20:33:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\QQ2007.rar'
C:\Documents and Settings\Administrator\桌面\QQ2007.rar
  [0] Archive type: RAR
  --> QQ2007.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
   [INFO]    A backup was created as '46614cab.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-25 20:34:45

Starting the file scan:

Begin scan in 'G:\QQ2007.rar'
G:\QQ2007.rar
  [0] Archive type: RAR
  --> QQ2007.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-25 20:42:29

卡巴7报警
报的是火狐的缓存
下载过程中又报了一次保存的目录，就没有截图了

显示全部楼层 · 发表于 2007-4-25 20:42:57

卡巴7 生气了[:27:]

显示全部楼层 · 发表于 2007-4-25 20:44:26

卡6没反应

显示全部楼层 · 发表于 2007-4-25 21:05:08

2007-4-25 21:03:52 !**************************************************
Safe'n'Sec 警报
行为
时间: 2007-4-25 21:03:15
类型: 编辑一个文件/目录
风险: 中等

程序
PID: 1236
PPID: 2148
UID: JLJ\jljqq
文件：E:\下载\QQ2007\QQ2007.EXE

对象
文件/目录: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSTEM2.JMP
用户操作: 阻止, 记住此次选择此次对话期间
阻止后终止程序

[ 本帖最后由 jlj383940 于 2007-4-25 21:06 编辑 ]

显示全部楼层 · 发表于 2007-4-25 21:23:21

F:\QQ2007[1].rar\QQ2007.exe - probably infected with DLOADER.Trojan

drweb 启发报

[病毒样本] 最新免杀QQ盗号木马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源