1

killloop

1月1日上报江民，1月4日回复，估计今天入库。

[size=0.9em]0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware. File name: 1.exe Submission date: 2011-01-03 21:50:45 (UTC) Current status: finished Result: 14/ 41 (34.1%)

VT Community [size=0.8em]not reviewed [size=0.8em] Safety score: -

Compact
Print results

Antivirus	Version	Last Update	Result
AhnLab-V3	2011.01.04.00	2011.01.03	-
AntiVir	7.11.1.17	2011.01.03	TR/ATRAPS.Gen
Antiy-AVL	2.0.3.7	2011.01.03	-
Avast	4.8.1351.0	2011.01.03	Win32:Malware-gen
Avast5	5.0.677.0	2011.01.03	Win32:Malware-gen
AVG	9.0.0.851	2011.01.03	-
BitDefender	7.2	2011.01.03	-
CAT-QuickHeal	11.00	2011.01.03	-
ClamAV	0.96.4.0	2011.01.03	Exploit.MS03-43
Command	5.2.11.5	2011.01.02	W32/Agent.EW.gen!Eldorado
Comodo	7288	2011.01.03	Worm.Win32.Dropper.RA
Emsisoft	5.1.0.1	2011.01.03	Virus.Win32.DelfInject !IK
eSafe	7.0.17.0	2011.01.02	-
eTrust-Vet	36.1.8079	2011.01.03	-
F-Prot	4.6.2.117	2011.01.02	W32/Agent.EW.gen!Eldorado
F-Secure	9.0.16160.0	2011.01.03	-
Fortinet	4.2.254.0	2011.01.03	-
GData	21	2011.01.03	Win32:Malware-gen
Ikarus	T3.1.1.90.0	2011.01.03	Virus.Win32.DelfInject
Jiangmin	13.0.900	2011.01.03	-
K7AntiVirus	9.75.3423	2011.01.03	Riskware
Kaspersky	7.0.0.125	2011.01.03	-
McAfee	5.400.0.1158	2011.01.03	-
McAfee-GW-Edition	2010.1C	2011.01.03	-
Microsoft	1.6402	2011.01.03	VirTool:Win32/DelfInject.gen!X
NOD32	5757	2011.01.03	a variant of Win32/PSW.QQTen.NAN
Norman	6.06.12	2011.01.03	-
nProtect	2011-01-03.01	2011.01.03	-
Panda	10.0.2.7	2011.01.03	Suspicious file
PCTools	7.0.3.5	2011.01.03	-
Prevx	3.0	2011.01.03	-
Rising	22.80.04.04	2010.12.31	-
Sophos	4.60.0	2011.01.03	-
SUPERAntiSpyware	4.40.0.1006	2011.01.03	-
Symantec	20101.3.0.103	2011.01.03	-
TheHacker	6.7.0.1.110	2011.01.03	-
TrendMicro	9.120.0.1004	2011.01.03	-
TrendMicro-HouseCall	9.120.0.1004	2011.01.03	-
VIPRE	7942	2011.01.03	-
ViRobot	2011.1.3.4234	2011.01.03	-
VirusBuster	13.6.125.0	2011.01.03	-

post8

to 360

幸福的猪猪

卡巴斯基启发式引擎报警。（样本上报卡巴斯基）


[KLAN-104265199]
时   间：2011年1月6日(星期四) 下午4:32

Hello,
104265199_362613785_1.exe_ - Trojan-PSW.Win32.QQPass.aafm
New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.
Please quote all when answering.
The answer is relevant to the latest bases from update sources.
--
Best regards,
Virus analyst, Kaspersky Lab.

rasis

ess

2011-1-4 7:56:10        文件系统实时防护        文件        D:\DOWNLOAD\1.exe        Win32/PSW.QQTen.NAN 特洛伊木马 的变种        通过删除清除 - 已隔离        RASIS\Administrator        在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zFM.exe.

留侯

大蜘蛛：
1\1.exe\data003 - is hacktool program Tool.Qqmima

Hacker29cn

毒霸杀：

电影结束了

扫描类型: 自定义扫描
对象: E:\virus test\1\1
扫描压缩文件: 开
启发式扫描: 开
ADS 扫描: 开

扫描开始于:        2011-1-4 上午 11:08:04

E:\virus test\1\1\1.exe         已检测: Virus.Win32.DelfInject !IK

hansyu

miss,to avert

恋亿晓

avast! kill
Win32:Malware-gen

猪头大队

AVG的外壳扩展如此不给力解压后还告诉我没问题，后来还是本地监控解决了