再来两个[be1d92 003bb9]

troika

已上报KB

promised

漏1个
?           Copyright (c) 1993-2007 by VBA Ltd.            ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\...\kesyn.exe : is suspected of Trojan-PSW.Lmir.104 (paranoid heuristics)
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 14
- scanned         : 1       -  scanned    : 2       - scanned     : 14
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 1       - suspicious  : 1

Startup    : 20:56:47 05-06-2007
End        : 20:56:52 05-06-2007
Total time : 00:00:05
终止批处理操作吗(Y/N)?

wangjay1980

detected: Trojan program Trojan-PSW.Win32.QQPass.wc        File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/kesyn.exe//FSG//SYSTEMKB.SYS

tracydk

caocao

KIS7
已经删除: 木马程序 Trojan-PSW.Win32.QQPass.wc        文件: D:\Downloads\Downloads.rar/kesyn.exe//FSG//SYSTEMKB.SYS

rasis

Downloads.rar
  [0] Archive type: RAR
  --> wl.exe
      [DETECTION] Is the Trojan horse TR/Agent.23270
  --> kesyn.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1

taihuxian

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=82601 is infected with Trojan-PSW.Win32.QQPass.wc virus

扫描开始时间: 2007-6-5 21:49:45
扫描日志
NOD32 版本 2309 (20070605) NT
命令行: F:\Downloads.rar

日期: 2007年6月5日  时间: 21:49:47
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\Downloads.rar
F:\Downloads.rar ?RAR ?wl.exe<病毒 - 可能是 Win32/Genetik 木马 变种>
F:\Downloads.rar ?RAR ?kesyn.exe<病毒 - 可能是 Win32/PSW.QQPass.VD 木马 变种>
已扫描文件数量: 2
已发现病毒数量: 2
完成时间: 21:49:47 总共扫描时间: 0 秒 (00:00:00)

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads.rar
>>>C:\Documents and Settings\Administrator\桌面\Downloads.rar\wl.exe infected with Trojan.MulDrop.origin
>>>C:\Documents and Settings\Administrator\桌面\Downloads.rar\kesyn.exe infected with Trojan.PWS.Qqpass.origin
C:\Documents and Settings\Administrator\桌面\Downloads.rar - archive contains infected objects

woai_jolin

ESS

2007/6/5 23:55:49        Scanning Log
2007/6/5 23:55:49        Version of virus signature database: 2309 (20070605)
2007/6/5 23:55:49        Date: 5.6.2007  Time: 23:55:49
2007/6/5 23:55:49        Scanned disks, folders and files: E:\病毒测试\
2007/6/5 23:55:50        E:\病毒测试\downloads.rar - multiple threats - deleted - quarantined
2007/6/5 23:55:50        E:\病毒测试\downloads.rar &raquo; RAR &raquo; wl.exe - probably a variant of Win32/Genetik trojan
2007/6/5 23:55:50        E:\病毒测试\downloads.rar &raquo; RAR &raquo; kesyn.exe - probably a variant of Win32/PSW.QQPass.VD trojan
2007/6/5 23:55:50        Number of scanned files: 3
2007/6/5 23:55:50        Number of threats found: 2
2007/6/5 23:55:50        Time of completion: 23:55:50  Total scanning time: 1 sec (00:00:01)