盗q，有能杀的，有不能杀的[MD5: 066A49 647EB5 822162 556D8E]

allenhippo

原帖由 promised 于 2007-6-26 21:12 发表
我反正藏着点以后慢慢发

你会发现卡巴过了几天就能杀了

The EQs

Scan performed at: 2007-6-26 21:35:05
Scanning Log
NOD32 version 2355 (20070626) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 26.6.2007  Time: 21:35:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?24926086.exe - Win32/Delf.AWY trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?svchost.exe - Win32/TrojanDownloader.Delf.AVR trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?up1[1].zip - Win32/PSW.OnLineGames.YA trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?up2[1].zip - probably a variant of Win32/PSW.QQShou.EP trojan
Number of scanned files: 5
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 21:35:13 Total scanning time: 4 sec (00:00:04)

1688388728

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3AIEVJEN\virus[1].rar\24926086.exe\data002 - infected with Trojan.Sniff
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3AIEVJEN\virus[1].rar\svchost.exe - infected with Trojan.Space
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3AIEVJEN\virus[1].rar\up1[1].zip - infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3AIEVJEN\virus[1].rar\up2[1].zip - infected with BINARYRES

Archive contains 4 infected items

蓝色牛仔裤

哦。居然漏了主要的svchost 。。。


[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe\data001 - Ok
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe\data002 infected with Trojan.Sniff
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe\data003 - Ok
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe\data004 - Ok
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe\data005 - Ok
>C:\Documents and Settings\Administrator\桌面\virus.rar\24926086.exe - archive contains infected objects
>>C:\Documents and Settings\Administrator\桌面\virus.rar\svchost.exe - Ok
>>C:\Documents and Settings\Administrator\桌面\virus.rar\up1[1].zip infected with Trojan.PWS.Wsgame
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\up2[1].zip infected with Trojan.PWS.Qqpass.origin
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

taihuxian

Virus: Win32:Delf-DXA [Trj], Win32:Onlinegames-ACD [Trj], Win32:Delf-CSK [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

欠妳緈諨

451102995

[0] Archive type: RAR
  --> 24926086.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> up1[1].zip
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> up2[1].zip
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.PF.55
      [INFO]      A backup was created as '46f432af.qua'  ( QUARANTINE )
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!

saga3721

小红伞名不虚传
Trojan.QQPass.PF.55

woai_jolin

2007/6/27 19:11:55        eAmon        file        D:\病毒上报\新建文件夹\up2[1].zip        probably a variant of Win32/PSW.QQShou.EP trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/27 19:11:54        eAmon        file        D:\病毒上报\新建文件夹\up1[1].zip        Win32/PSW.OnLineGames.YA trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/27 19:11:53        eAmon        file        D:\病毒上报\新建文件夹\svchost.exe        Win32/TrojanDownloader.Delf.AVR trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/6/27 19:11:52        eAmon        file        D:\病毒上报\新建文件夹\24926086.exe        Win32/Delf.AWY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.