忘了，还有2个[MD5: 911C43 5FC6DC]

promised

[ 本帖最后由 promised 于 2007-7-16 15:41 编辑 ]

扫描开始时间: 2007-7-16 15:42:56
扫描日志
NOD32 版本 2399 (20070714) NT
命令行: F:\virus\Connection_Wizard.zip

日期: 2007年7月16日  时间: 15:42:57
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\Connection_Wizard.zip
F:\virus\Connection_Wizard.zip ?ZIP ?Connection Wizard/isignup.dll<病毒 - 可能是 Win32/PSW.QQShou 木马 变种>
F:\virus\Connection_Wizard.zip ?ZIP ?Connection Wizard/isignup.sys<病毒 - 可能是 Win32/PSW.QQShou 木马 变种>
已扫描文件数量: 2
已发现病毒数量: 2
完成时间: 15:42:57 总共扫描时间: 0 秒 (00:00:00)


我机器没下载到这个

wangjay1980

deleted: Trojan program Trojan-PSW.Win32.WOW.qz        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\Connection Wizard.zip/Connection Wizard/isignup.dll//UPX
deleted: Trojan program Trojan-PSW.Win32.WOW.qz        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\Connection Wizard.zip/Connection Wizard/isignup.sys

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODF6D3.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: D:\virus\Connection_Wizard.zip
       62 ms D:\virus\Connection_Wizard.zip : Connection Wizard/isignup.dll Trojan W32/Malware.UMI ()
       31 ms D:\virus\Connection_Wizard.zip : Connection Wizard/isignup.sys Trojan W32/Wow.BDL ()
        0 ms D:\virus\Connection_Wizard.zip                              
        0 ms D:\virus\Connection_Wizard.zip:Zone.Identifier              
- File D:\virus\Connection_Wizard.zip quarantined.
- File D:\virus\Connection_Wizard.zip quarantined.

===================================================================================================

The scanning started: 2007/07/16 15:37:53
               ended: 2007/07/16 15:37:56
Logged on as        : Jason
on hostname         : JASON-PC

Scanning results:
   Total number of files found..............................:       4
   Number of files scanned..................................:       4
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       2

Copyright (c) 1993-2005 Norman ASA.

1688388728

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\Connection Wizard[1].zip\Connection Wizard/isignup.dll - infected with Trojan.PWS.Gamania.2870
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\Connection Wizard[1].zip\Connection Wizard/isignup.sys - infected with Trojan.PWS.Qqpass.origin

Archive contains 2 infected items

yym1988520

nis  清除  2

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\Connection_Wizard.zip'
F:\病毒样本\Connection_Wizard.zip
  [0] Archive type: ZIP
  --> Connection Wizard/isignup.dll
      [DETECTION] Is the Trojan horse TR/PSW.52403
  --> Connection Wizard/isignup.sys
      [DETECTION] Is the Trojan horse TR/PSW.52403
      [INFO]      The file was deleted!

uhthn2002

C:\Documents and Settings\uhthn\Desktop\Connection\<ZIP>:Connection Wizard\isignup.dll;;Infected;Trojan.PWS.Gamania;;
C:\Documents and Settings\uhthn\Desktop\Connection\<ZIP>:Connection Wizard\isignup.sys;;Infected;Trojan-PSW.Win32.WOW.qz;;

红心王子

Trojan.PSW.QQPass.tlc
竟然重复自己的样本。。。无语

promised

有一个不是重复的
一个不是，路径不同没有注意

[ 本帖最后由 promised 于 2007-7-16 18:13 编辑 ]