[MD5: 1C744C]

tonger2003

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\病毒样本.rar
>>>C:\Documents and Settings\Administrator\桌面\病毒样本.rar\HbSTWgP.com infected with Trojan.PWS.Qqpass.origin
C:\Documents and Settings\Administrator\桌面\病毒样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 31 Kb/s
Scan time: 00:00:00

yashoo

咖啡报木马

mhj144007

Dr.Web
病毒样本.rar\HbSTWgP.com;C:\Documents and Settings\Mahaijun\桌面\病毒样本.rar;Trojan.PWS.Qqpass.origin;;
病毒样本.rar;C:\Documents and Settings\Mahaijun\桌面;档案文件已被病毒感染;;
怪了，.com解壓怎麽看不到

[ 本帖最后由 mhj144007 于 2007-6-16 21:12 编辑 ]

promised

酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\...\setup.exe : is suspected of Trojan-Spy.Delf.13 (paranoid heuristics)
C:\ABC\病毒样本.rar:<RAR>\HbSTWgP.com : infected MalwareScope.Trojan-PSW.Game.7
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 28
- scanned         : 2       -  scanned    : 2       - scanned     : 28
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 1       - suspicious  : 1

Startup    : 21:14:20 16-06-2007
End        : 21:14:24 16-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

wangjay1980

上报Hello,

HbSTWgP.com_ - Trojan-PSW.Win32.QQPass.wm

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.


> Attachment: ????.zip


[ 本帖最后由 wangjay1980 于 2007-6-16 22:32 编辑 ]

aerbeisi

ie plugins文件夹下扔东西，d盘生成auto.inf和另外一个病毒体。

woai_jolin

ess
2007/6/16 21:21:39        Scanning Log
2007/6/16 21:21:39        Version of virus signature database: 2335 (20070616)
2007/6/16 21:21:39        Date: 16.6.2007  Time: 21:21:38
2007/6/16 21:21:39        Scanned disks, folders and files: D:\病毒测试\
2007/6/16 21:21:39        D:\病毒测试\病毒样本.rar - probably a variant of Win32/PSW.QQPass.VD trojan - deleted - quarantined
2007/6/16 21:21:39        D:\病毒测试\病毒样本.rar &raquo; RAR &raquo; HbSTWgP.com - probably a variant of Win32/PSW.QQPass.VD trojan
2007/6/16 21:21:39        Number of scanned files: 2
2007/6/16 21:21:39        Number of threats found: 1
2007/6/16 21:21:39        Time of completion: 21:21:39  Total scanning time: 1 sec (00:00:01)

taihuxian

2007-6-16,22:04:27 [WARNING] Contains suspicious code HEUR/Malware!
  C:\WINDOWS\Temp\_avast4_\unp118673181.tmp
      [INFO] No action will be taken on the file.

taihuxian

Virus: Trojan-PSW.Win32.QQPass.wm

Virus found while downloading Web content.

Address: bbs.kafan.cn