MD5: 7016CF

显示全部楼层 · 发表于 2007-6-8 14:31:40

MD5: 7016CF

显示全部楼层 · 发表于 2007-6-8 14:40:50

Virus or unwanted program 'HEUR/Malware [HEUR/Malware]'
detected in file 'C:\Documents and Settings\Joseph Wan\Desktop\moonsilver1\moonsilver1.exe.
Action performed: Allow access

2007-6-8 14:41:23 Joseph Wan 1596 Sign of "Win32:Qqshou-J [Trj]" has been found in "C:\Documents and Settings\Joseph Wan\Desktop\moonsilver1\moonsilver1.exe" file.

显示全部楼层 · 发表于 2007-6-8 14:42:17

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=84107 is infected with Trojan-PSW.Win32.QQShou.ha virus

显示全部楼层 · 发表于 2007-6-8 15:05:02

MD5: 7016CF

显示全部楼层 · 发表于 2007-6-8 15:07:07

咖啡杀，报木马

显示全部楼层 · 发表于 2007-6-8 15:07:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\moonsilver1.rar'
C:\Documents and Settings\Administrator\桌面\moonsilver1.rar
  [0] Archive type: RAR
  --> moonsilver1.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '46d800ca.qua'!

显示全部楼层 · 发表于 2007-6-8 15:44:32

木马名称:Trojan-PSW.Win32.QQShou.vh
程序:
I:\TEST\070608\10\MOONSILVER1\MOONSILVER1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-6-8 16:03:49

?          Copyright (c) 1993-2007 by VBA Ltd.          ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C...\moonsilver1.exe : is suspected of Trojan-PSW.Pinch.33 (paranoid heuristics)
Program execution terminated by user

Directories    : 4    Files in archives:    Files on disks:
Archives:                - total    : 5    - total    : 30
- scanned       : 4    -  scanned : 5    - scanned    : 30
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

Startup : 16:05:20 08-06-2007
End       : 16:05:26 08-06-2007
Total time : 00:00:06
终止批处理操作吗(Y/N)?

显示全部楼层 · 发表于 2007-6-8 16:40:59

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=84107 is infected with Trojan-PSW.Win32.QQShou.ha virus

显示全部楼层 · 发表于 2007-6-8 16:42:23

Program:E:\SOFT_KILLER\MOONSILVER1.EXE
Is Trojan horse program!
Trojan horse name:Trojan-PSW.Win32.QQShou.vh
Operation result:Successfully cleared

[病毒样本] MD5: 7016CF

本帖子中包含更多资源

本帖子中包含更多资源

微点报已知

浏览过的版块