样本~~

显示全部楼层 · 发表于 2007-5-11 17:01:21

12121

显示全部楼层 · 发表于 2007-5-11 17:03:40

C:\Documents and Settings\moonsilver\桌面\SBA.rar
>>SBA.exe>>mian007

Trojan.PSW.QQPass.rnl

rising

显示全部楼层 · 发表于 2007-5-11 17:07:41

BitDefender Antivirus Plus v10
SBA.rar=>SBA.exe Infected: GenPack:Generic.PWStealer.77B7C88E

显示全部楼层 · 发表于 2007-5-11 17:14:37

===============================================
___________病毒查杀结果__________________

===============================================

2005年5月11日17时14分36秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹/SBA
C:\Documents and Settings\Administrator\桌面\新建文件夹/SBA\SBA.exe 发现未知可疑文件:Win32.NkHack.BDX.A 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2005年5月11日17时14分36秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-5-11 17:14:46

McAfee 已自動封鎖並隔離特洛伊病毒。

詳細資料
偵測: New Malware.w (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\SBA.exe

显示全部楼层 · 发表于 2007-5-11 17:17:40

Begin scan in 'C:\Documents and Settings\Administrator\桌面\SBA.rar'
C:\Documents and Settings\Administrator\桌面\SBA.rar
  [0] Archive type: RAR
  --> SBA.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-5-11 17:18:21

detected: Trojan program Trojan-PSW.Win32.QQPass.rj URL: http://bbs.kafan.cn/attachment.p ... atch.NSAnti//NSAnti

显示全部楼层 · 发表于 2007-5-11 18:10:02

显示全部楼层 · 发表于 2007-5-11 18:21:56

大众快餐
Scan performed at: 2007-5-11 18:21:06
Scanning Log
NOD32 version 2257 (20070511) NT
Command line: D:\SBA.rar
Operating memory - is OK

Date: 11.5.2007 Time: 18:21:18
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\SBA.rar
D:\SBA.rar ?RAR ?SBA.exe - a variant of Win32/PSW.QQShou.NAU trojan
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 18:21:30 Total scanning time: 12 sec (00:00:12)

显示全部楼层 · 发表于 2007-5-11 18:26:38

Check system areas...
Check selected directories and files...
Object: SBA.exe
In archive: C:\Documents and Settings\Administrator\桌面\SBA.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.rj (KAV engine), GenPack:Generic.PWStealer.77B7C88E (BD-Engine)
Object: SBA.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.rj (KAV engine), GenPack:Generic.PWStealer.77B7C88E (BD-Engine)
Analysis complete: 2007-5-11 18:26
1 files checked
1 infected files detected
0 suspected files detected

[病毒样本] 样本~~

本帖子中包含更多资源

本帖子中包含更多资源