2+2个 过卡巴[MD5: D6101C 116EC2 AC09C2 E01BE4]

qqq000@qq.com

[凝逸.扫描记录]
MD5[AC09C2 E01BE4 D6101C 116EC2 ac09c2 e01be4 d6101c ]
c:\documents and settings\系1\my documents\my documents\AC09C2_6to4svc.dll,木马
c:\documents and settings\系1\my documents\my documents\E01BE4_autolfn.exe,ok
c:\documents and settings\系1\my documents\my documents\D6101C_fdeploy.dll,ok
c:\documents and settings\系1\my documents\my documents\116EC2_h@tkeysh@@k.dll,木马
c:\documents and settings\系1\my documents\my documents\ac09c2_6to4svc.dll,木马
c:\documents and settings\系1\my documents\my documents\e01be4_autolfn.exe,ok
c:\documents and settings\系1\my documents\my documents\d6101c_fdeploy.dll,ok
感染:0/文件:7
扫描完成|文件:7|耗时:931

2个 过卡巴

6to4svc.dll 有1个报
autolfn.exe  没有发现
fdeploy.dll   没有发现
[email=h@tkeysh@@k.dll]h@tkeysh@@k.dll[/email]  有8个报
4个  


http://www.virscan.org/report.php?id=ac09c2d6ccc914066e9c00f9163672ca&lang=zh-CN
http://www.virscan.org/report.php?id=116ec20265b00cfe389518e2a0c7ed81&lang=zh-CN

文件名称 :	h@tkeysh@@k.dll
文件大小 :	20480 byte
文件类型 :	MS Windows PE 32-bit Intel 80386 GUI DLL
MD5 :	116ec20265b00cfe389518e2a0c7ed81
SHA1 :	da39a3ee5e6b4b0d3255bfef95601890afd80709

扫描结果

扫描结果 :	35%的杀软(8/23)报告发现病毒
扫描完成时间 :	2007/07/21 10:08:00

软件名称引擎版本
病毒库版本
病毒库时间
扫描结果
扫描完成时间
a-squared3.0.0.1232007.07.192007-07-19没有检测到病毒3.75Arcavir1.0.42007072017302007-07-20Trojan.Keylogger1.097AVAST1.0.8000758-12007-07-20没有检测到病毒1.54AVG7.5.47.442269.10.11/9092007-07-20没有检测到病毒1.203BitDefender7.60825.7007907.139522007-07-21没有检测到病毒2.509ClamAV N/A37132007-07-21Trojan.W32.HotKeysHook.A-20.007F-SECURE5.51.61002007.07.20.032007-07-20没有检测到病毒2.271IKARUST3.1.1.817:08:292007-07-20Win32.KeyLogger.HatKeys1.257MKS_VIR2.012007.07.202007-07-20Trojan.Keylogger0.109NOD322.70.724102007-07-20Win32/Keylogger.HotKeysHook.A ...1.311SOPHOS2.474.192007-07-21没有检测到病毒5.971VBA323.12.2.120070719.19392007-07-19RiskWare.CrackTool.Win32.HotHo...0.55VirusBuster4.3.19:99.090.1/11.02007-07-20没有检测到病毒0.9冰岛杀毒3.16.152007.07.202007-07-20没有检测到病毒0.372卡巴斯基5.5.102007.07.212007-07-21没有检测到病毒0.034大蜘蛛4.332007.07.202007-07-20Tool.Hatkeys4.48小红伞7.4.0.446.39.0.1742007-07-20没有检测到病毒2.131熊猫卫士9.00.002007.07.202007-07-20没有检测到病毒0.737诺曼5.90.375.902007-07-20W32/HotKeys.A2.458赛门铁克1.3.0.2420070720.0162007-07-20没有检测到病毒0.203趋势8.500-10014.607.002007-07-20没有检测到病毒0.038迈克菲5.1.0050792007-07-20没有检测到病毒0.605金山毒霸2007.4.17.2472007.7.202007-07-20没有检测到病毒0.766注意: 就算报告发现病毒，也可能是杀软误报，请根据查毒结果自行判断

[ 本帖最后由 promised 于 2007-7-21 11:28 编辑 ]

pine

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\My Documents.rar'
C:\Documents and Settings\Administrator\桌面\My Documents.rar
  [0] Archive type: RAR
  --> h@tkeysh@@k.dll
      [DETECTION] Contains signature of the SPR/PSW.HotKeys program
      [INFO]      The file was deleted!

风野胤

autolfn.exe 死的
唯一一个可以运行的是死的
完全不好玩了

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\My_Documents.rar'
F:\病毒样本\My_Documents.rar
  [0] Archive type: RAR
  --> h@tkeysh@@k.dll
      [DETECTION] Contains signature of the SPR/PSW.HotKeys program
      [INFO]      The file was deleted!

qqq000@qq.com

autolfn.exe  也是马吗?

TZW

我试了好多个，费尔没让我失望啊。

风野胤

死的

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.7.21 10:28:50

文件:C:\Documents and Settings\系1\My Documents\My Documents\6to4svc.dll | 感染:木马 [1876>20070707_605975.axx]3(1.1)
操作:删除文件
文件:C:\Documents and Settings\系1\My Documents\My Documents\autolfn.exe | 感染:木马 [136>20070627_77cdf2.axx]3(1.1)
操作:删除文件
文件:C:\Documents and Settings\系1\My Documents\My Documents\fdeploy.dll | 感染:木马 [132>20070627_77cdf2.axx]3(1.1)
操作:删除文件
文件:C:\Documents and Settings\系1\My Documents\My Documents\h@tkeysh@@k.dll | 感染:Tool.Hatkeys [1901>20070613_a84cd4.axx]3(1.1)
操作:删除文件

扫描完成|病毒:4 文件:4|耗时:1412
----------

电影结束了

NOD32运行报生成物............
不过还是死的.......

woai_jolin

2007/7/21 10:30:28        Scanning Log
2007/7/21 10:30:28        Version of virus signature database: 2410 (20070720)
2007/7/21 10:30:28        Date: 21.7.2007  Time: 10:30:28
2007/7/21 10:30:28        Scanned disks, folders and files: F:\v\
2007/7/21 10:30:30        F:\v\My_Documents.rar - Win32/Keylogger.HotKeysHook.A virus - deleted - quarantined
2007/7/21 10:30:30        F:\v\My_Documents.rar » RAR » h@tkeysh@@k.dll - Win32/Keylogger.HotKeysHook.A virus
2007/7/21 10:30:30        Number of scanned files: 5
2007/7/21 10:30:30        Number of threats found: 1
2007/7/21 10:30:30        Time of completion: 10:30:30  Total scanning time: 2 sec (00:00:02)