木马一个。。卡巴挂。。

显示全部楼层 · 发表于 2007-5-3 12:00:19

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update as Trojan-Downloader.Win32.QQHelper.vl. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

> Attachment: rfw.rar

> Hello
> Is it a new virus?The password:virus

显示全部楼层 · 发表于 2007-5-3 12:05:05

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\rfw'
C:\Documents and Settings\morgan\My Documents\rfw\
  rfw.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-3 12:06:38

觉得是误报，貌似是瑞星防火墙的东西，上报antivir

显示全部楼层 · 发表于 2007-5-3 12:07:32

File: rfw.dll
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 12d08ccf6ff100271ed1e40d7250edd3
Packers detected: PE_PATCH

Scanner results
Scan taken on 03 May 2007 04:06:29 (GMT)
A-Squared Found nothing
AntiVir Found HEUR/Malware
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found Downloader.Generic4.GWK
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found Win32/TrojanDownloader.QQHelper
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

显示全部楼层 · 发表于 2007-5-3 12:08:51

avg没发现

显示全部楼层 · 发表于 2007-5-3 12:09:11

卡巴都说是木马了。。。

显示全部楼层 · 发表于 2007-5-3 13:16:41

ESS杀

显示全部楼层 · 发表于 2007-5-3 13:52:01

金山那垃圾
不说了

显示全部楼层 · 发表于 2007-5-3 15:44:06

假冒瑞星的文件，其实不是

显示全部楼层 · 发表于 2007-5-3 15:46:48

nis2007过~~

[病毒样本] 木马一个。。卡巴挂。。

本帖子中包含更多资源