【样本合集】qqhelper

显示全部楼层 · 发表于 2007-7-31 12:29:03

还有好多，先放一部分
大家随便扫扫
http://www1.51ok.com/down.do?503D2ECA05AAC3D306AA50060C1D2F6B

or
http://www.divshare.com/download/1419159-b0e

[ 本帖最后由 lanvin 于 2007-7-31 12:49 编辑 ]

显示全部楼层 · 发表于 2007-7-31 12:40:32

200多K
挺快的说

显示全部楼层 · 发表于 2007-7-31 12:42:15

显示全部楼层 · 发表于 2007-7-31 12:59:40

番茄出精品了

D:\download\t3\qqhelper\qqhelper\00.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\01.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\02.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ep' found
D:\download\t3\qqhelper\qqhelper\03.exe - Signature 'Trojan.Win32.Obfuscated.ex' found
D:\download\t3\qqhelper\qqhelper\04.exe - Signature 'Trojan-Downloader.Win32.QQHelper.fu' found
D:\download\t3\qqhelper\qqhelper\01.dll - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\06.exe - Signature 'Trojan.Win32.Obfuscated.ex' found
D:\download\t3\qqhelper\qqhelper\07.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\08.exe - Signature 'Trojan-Downloader.NSIS.QQHelper.i' found
D:\download\t3\qqhelper\qqhelper\09.exe
D:\download\t3\qqhelper\qqhelper\10.exe - Signature 'Trojan-Downloader.Win32.QQHelper.di' found
D:\download\t3\qqhelper\qqhelper\11.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vk' found
D:\download\t3\qqhelper\qqhelper\12.exe - Signature 'Trojan-Downloader.Win32.QQHelper.dn' found
D:\download\t3\qqhelper\qqhelper\13.exe - Signature 'Trojan-Downloader.Win32.QQHelper.dv' found
D:\download\t3\qqhelper\qqhelper\14.exe - Signature 'Win32.SuspectCrc' found
D:\download\t3\qqhelper\qqhelper\15.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\16.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\17.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\18.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ep' found
D:\download\t3\qqhelper\qqhelper\19.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\20.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\21.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\22.exe - Signature 'Trojan-Downloader.Win32.QQHelper' found
D:\download\t3\qqhelper\qqhelper\23.exe - Signature 'Trojan-Downloader.Win32.Agent.axj' found
D:\download\t3\qqhelper\qqhelper\24.exe - Signature 'Trojan-Downloader.Win32.QQHelper.m' found
D:\download\t3\qqhelper\qqhelper\25.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ft' found
D:\download\t3\qqhelper\qqhelper\26.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\27.exe - Signature 'Trojan-Downloader.Win32.QQHelper.nw' found
D:\download\t3\qqhelper\qqhelper\28.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vk' found
D:\download\t3\qqhelper\qqhelper\29.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\30.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\31.exe - Signature 'Trojan-Downloader.Win32.Cryptic' found
D:\download\t3\qqhelper\qqhelper\32.exe - Signature 'Trojan-Downloader.Win32.QQHelper.rb' found
D:\download\t3\qqhelper\qqhelper\33.exe - Signature 'Trojan-Downloader.Win32.QQHelper.rg' found
D:\download\t3\qqhelper\qqhelper\34.exe - Signature 'Trojan-Downloader.Win32.QQHelper.rg' found
D:\download\t3\qqhelper\qqhelper\35.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\36.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\37.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\38.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\39.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\40.exe:\dodolook246.exe - Signature 'not-a-virus:AdWare.Win32.Cinmus.f' found
D:\download\t3\qqhelper\qqhelper\40.exe:\bind_50454.exe - Signature 'Trojan-Downloader.Win32.QQHelper.tp' found
D:\download\t3\qqhelper\qqhelper\40.exe
D:\download\t3\qqhelper\qqhelper\41.exe - Signature 'Trojan-Downloader.Win32.QQHelper.tp' found
D:\download\t3\qqhelper\qqhelper\42.exe - Signature 'Trojan-Downloader.Win32.QQHelper.tw' found
D:\download\t3\qqhelper\qqhelper\43.exe - Signature 'Trojan-Downloader.Win32.QQHelper.tz' found
D:\download\t3\qqhelper\qqhelper\44.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ui' found
D:\download\t3\qqhelper\qqhelper\45.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ul' found
D:\download\t3\qqhelper\qqhelper\46.exe - Signature 'Trojan-Downloader.Win32.QQHelper.up' found
D:\download\t3\qqhelper\qqhelper\47.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ur' found
D:\download\t3\qqhelper\qqhelper\48.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\49.exe:\dodolook144.exe - Signature 'not-a-virus:AdWare.Win32.Cinmus.f' found
D:\download\t3\qqhelper\qqhelper\49.exe:\bind_50080.exe
D:\download\t3\qqhelper\qqhelper\49.exe
D:\download\t3\qqhelper\qqhelper\50.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\51.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\52.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\53.exe - Signature 'Trojan-Downloader.Win32.QQHelper.va' found
D:\download\t3\qqhelper\qqhelper\54.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\55.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\56.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vk' found
D:\download\t3\qqhelper\qqhelper\57.exe - Signature 'Generic.Dynk' found
D:\download\t3\qqhelper\qqhelper\58.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vk' found
D:\download\t3\qqhelper\qqhelper\59.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vk' found
D:\download\t3\qqhelper\qqhelper\60.exe - Signature 'Trojan-Downloader.23049' found
D:\download\t3\qqhelper\qqhelper\61.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vo' found
D:\download\t3\qqhelper\qqhelper\62.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vp' found
D:\download\t3\qqhelper\qqhelper\63.exe - Signature 'AdWare.Win32.Boran.i' found
D:\download\t3\qqhelper\qqhelper\64.exe - Signature 'Trojan-Downloader.Win32.QQHelper.vx' found
D:\download\t3\qqhelper\qqhelper\65.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wd' found
D:\download\t3\qqhelper\qqhelper\66.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wk' found
D:\download\t3\qqhelper\qqhelper\67.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wl' found
D:\download\t3\qqhelper\qqhelper\68.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\69.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wp' found
D:\download\t3\qqhelper\qqhelper\70.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wq' found
D:\download\t3\qqhelper\qqhelper\71.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wr' found
D:\download\t3\qqhelper\qqhelper\72.exe - Signature 'Trojan-Downloader.Win32.QQHelper.ws' found
D:\download\t3\qqhelper\qqhelper\73.exe - Signature 'Trojan-Downloader.Win32.QQHelper.wt' found
D:\download\t3\qqhelper\qqhelper\74.exe - Signature 'Trojan-Downloader.Win32.Agent.bbb' found
D:\download\t3\qqhelper\qqhelper\00.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\02.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\03.dll - Signature 'Trojan-Dropper.Win32.Delf.acc' found
D:\download\t3\qqhelper\qqhelper\04.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\05.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\06.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\07.dll - Signature 'Trojan-Downloader.Win32.QQHelper.mo' found
D:\download\t3\qqhelper\qqhelper\08.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\09.dll - Signature 'Trojan-Downloader.Win32.QQHelper.rp' found
D:\download\t3\qqhelper\qqhelper\10.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ve' found
D:\download\t3\qqhelper\qqhelper\11.dll - Signature 'Trojan-Downloader.Win32.QQHelper.ty' found
D:\download\t3\qqhelper\qqhelper\12.dll - Signature 'Trojan-Downloader.Win32.QQHelper.vl' found

91 Files scanned
(2 Archives with 4 files)
87 Signatures found
0 Suspect code-parts found
Used time: 0:12.247

显示全部楼层 · 发表于 2007-7-31 13:01:46

--> qqhelper\00.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\01.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelpe.q.3
  --> qqhelper\02.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.EP.1
  --> qqhelper\03.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OG
  --> qqhelper\04.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/AdHelper.CE.1
  --> qqhelper\01.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\06.exe
   [DETECTION] Contains signature of the dropper DR/QQHelper.CH.1
  --> qqhelper\07.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\08.exe
   [DETECTION] Contains signature of the dropper DR/Dldr.NSIS.QQHelper.I.6
  --> qqhelper\09.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHel.q.3.A
  --> qqhelper\10.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DI
  --> qqhelper\11.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Dynk.B.25
  --> qqhelper\12.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DN
  --> qqhelper\13.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DV.1
  --> qqhelper\14.exe
   [DETECTION] Contains signature of the dropper DR/Dldr.Small.dca.3
  --> qqhelper\15.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\16.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\17.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.FT.8
  --> qqhelper\18.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\19.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\20.exe
   [DETECTION] Is the Trojan horse TR/Drop.Quickcent.A
  --> qqhelper\21.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\22.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\23.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.KI
  --> qqhelper\24.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\25.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\26.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\27.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.NW.18
  --> qqhelper\28.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\29.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OP.2
  --> qqhelper\30.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OP.5
  --> qqhelper\31.exe
   [DETECTION] Contains signature of the dropper DR/Agent.BP
  --> qqhelper\32.exe
   [DETECTION] Is the Trojan horse TR/Agent.24576.140
  --> qqhelper\33.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RG.8
  --> qqhelper\34.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RG.14
  --> qqhelper\35.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\36.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\37.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\38.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelp.FT.2
  --> qqhelper\39.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TM.1
--> qqhelper\40.exe
   [1] Archive type: RAR SFX (self extracting)
   --> dodolook246.exe
      [DETECTION] Is the Trojan horse TR/Drop.Sawsedge
   --> bind_50454.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Harnig.6
  --> qqhelper\41.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TP.14
  --> qqhelper\42.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TW
  --> qqhelper\43.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\44.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UI
  --> qqhelper\45.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UL
  --> qqhelper\46.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.6
  --> qqhelper\47.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UR
  --> qqhelper\48.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\49.exe
   [DETECTION] Contains signature of the dropper DR/Cinmus.U
   [1] Archive type: RAR SFX (self extracting)
   --> dodolook144.exe
      [DETECTION] Is the Trojan horse TR/Drop.RKit.Cinm.M
   --> bind_50080.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UV.12
  --> qqhelper\50.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelp.FT.2
  --> qqhelper\51.exe
   [DETECTION] Is the Trojan horse TR/Muldrop.BX.546
  --> qqhelper\52.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VA.72
  --> qqhelper\53.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VA.36
  --> qqhelper\54.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Barbind.2.A
  --> qqhelper\55.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.abt.2
  --> qqhelper\56.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\57.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.66048
  --> qqhelper\58.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\59.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\60.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.T.3
  --> qqhelper\61.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VO
  --> qqhelper\62.exe
   [DETECTION] Is the Trojan horse TR/Agent.20480.26
  --> qqhelper\63.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VR
  --> qqhelper\64.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VX.1
  --> qqhelper\65.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WD.1
  --> qqhelper\66.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WK.7
  --> qqhelper\67.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WL
  --> qqhelper\68.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Barbind.2.A
  --> qqhelper\69.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WP
  --> qqhelper\70.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WQ.2
  --> qqhelper\71.exe
   [DETECTION] Is the Trojan horse TR/Agent.24576.137
  --> qqhelper\72.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WS.1
  --> qqhelper\73.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WT.2
  --> qqhelper\74.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHel.DDN.1
  --> qqhelper\00.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.Z.1
  --> qqhelper\02.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.B
  --> qqhelper\03.dll
   [DETECTION] Is the Trojan horse TR/Dldr.NewWeb.B
  --> qqhelper\04.dll
   [DETECTION] Is the Trojan horse TR/Spy.Agent.XN
  --> qqhelper\05.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.FU
  --> qqhelper\06.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.KF.5
  --> qqhelper\07.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.MO
  --> qqhelper\08.dll
   [DETECTION] Is the Trojan horse TR/Drop.Multi.D.2
  --> qqhelper\09.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.A
  --> qqhelper\10.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.BP
  --> qqhelper\11.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.A
  --> qqhelper\12.dll
   [DETECTION] Is the Trojan horse TR/Hijack.Ob.241664

   92 Files were scanned
   90 viruses and/or unwanted programs were found

显示全部楼层 · 发表于 2007-7-31 13:10:12

--> qqhelper\00.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\01.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelpe.q.3
  --> qqhelper\02.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.EP.1
  --> qqhelper\03.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OG
  --> qqhelper\04.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/AdHelper.CE.1
  --> qqhelper\01.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\06.exe
   [DETECTION] Contains signature of the dropper DR/QQHelper.CH.1
  --> qqhelper\07.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\08.exe
   [DETECTION] Contains signature of the dropper DR/Dldr.NSIS.QQHelper.I.6
  --> qqhelper\09.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHel.q.3.A
  --> qqhelper\10.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DI
  --> qqhelper\11.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Dynk.B.25
  --> qqhelper\12.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DN
  --> qqhelper\13.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.DV.1
  --> qqhelper\14.exe
   [DETECTION] Contains signature of the dropper DR/Dldr.Small.dca.3
  --> qqhelper\15.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\16.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\17.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.FT.8
  --> qqhelper\18.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\19.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\20.exe
   [DETECTION] Is the Trojan horse TR/Drop.Quickcent.A
  --> qqhelper\21.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\22.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\23.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.KI
  --> qqhelper\24.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\25.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelpe.q.1
  --> qqhelper\26.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\27.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.NW.18
  --> qqhelper\28.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\29.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OP.2
  --> qqhelper\30.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.OP.5
  --> qqhelper\31.exe
   [DETECTION] Contains signature of the dropper DR/Agent.BP
  --> qqhelper\32.exe
   [DETECTION] Is the Trojan horse TR/Agent.24576.140
  --> qqhelper\33.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RG.8
  --> qqhelper\34.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RG.14
  --> qqhelper\35.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\36.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\37.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.B
  --> qqhelper\38.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelp.FT.2
  --> qqhelper\39.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TM.1
--> qqhelper\40.exe
   [1] Archive type: RAR SFX (self extracting)
   --> dodolook246.exe
      [DETECTION] Is the Trojan horse TR/Drop.Sawsedge
   --> bind_50454.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Harnig.6
  --> qqhelper\41.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TP.14
  --> qqhelper\42.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.TW
  --> qqhelper\43.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\44.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UI
  --> qqhelper\45.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UL
  --> qqhelper\46.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.6
  --> qqhelper\47.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UR
  --> qqhelper\48.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Harnig.5
  --> qqhelper\49.exe
   [DETECTION] Contains signature of the dropper DR/Cinmus.U
   [1] Archive type: RAR SFX (self extracting)
   --> dodolook144.exe
      [DETECTION] Is the Trojan horse TR/Drop.RKit.Cinm.M
   --> bind_50080.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.UV.12
  --> qqhelper\50.exe
   [DETECTION] Is the Trojan horse TR/Drop.QQHelp.FT.2
  --> qqhelper\51.exe
   [DETECTION] Is the Trojan horse TR/Muldrop.BX.546
  --> qqhelper\52.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VA.72
  --> qqhelper\53.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VA.36
  --> qqhelper\54.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Barbind.2.A
  --> qqhelper\55.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.abt.2
  --> qqhelper\56.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\57.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.66048
  --> qqhelper\58.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\59.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> qqhelper\60.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.T.3
  --> qqhelper\61.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VO
  --> qqhelper\62.exe
   [DETECTION] Is the Trojan horse TR/Agent.20480.26
  --> qqhelper\63.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VR
  --> qqhelper\64.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.VX.1
  --> qqhelper\65.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WD.1
  --> qqhelper\66.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WK.7
  --> qqhelper\67.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WL
  --> qqhelper\68.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Barbind.2.A
  --> qqhelper\69.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WP
  --> qqhelper\70.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WQ.2
  --> qqhelper\71.exe
   [DETECTION] Is the Trojan horse TR/Agent.24576.137
  --> qqhelper\72.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WS.1
  --> qqhelper\73.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WT.2
  --> qqhelper\74.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHel.DDN.1
  --> qqhelper\00.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.Z.1
  --> qqhelper\02.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.B
  --> qqhelper\03.dll
   [DETECTION] Is the Trojan horse TR/Dldr.NewWeb.B
  --> qqhelper\04.dll
   [DETECTION] Is the Trojan horse TR/Spy.Agent.XN
  --> qqhelper\05.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.FU
  --> qqhelper\06.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.KF.5
  --> qqhelper\07.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.MO
  --> qqhelper\08.dll
   [DETECTION] Is the Trojan horse TR/Drop.Multi.D.2
  --> qqhelper\09.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.A
  --> qqhelper\10.dll
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.BP
  --> qqhelper\11.dll
   [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.A
  --> qqhelper\12.dll
   [DETECTION] Is the Trojan horse TR/Hijack.Ob.241664
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-7-31 13:11:13

扫描开始时间: 2007-7-31 13:09:49
扫描日志
NOD32 版本 2429 (20070730) NT
命令行: F:\virus\qqhelper.rar
C:\Program Files\Eset\nod32.exe<病毒 - 正常>
物理磁盘 1 的 MBR 扇区，<病毒 - 正常>
物理磁盘 1 的活动引导扇区，<病毒 - 正常>

日期: 2007年7月31日时间: 13:09:51
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\qqhelper.rar
F:\virus\qqhelper.rar ?RAR ?qqhelper\00.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\01.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\02.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\03.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\04.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\01.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\06.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\07.exe<病毒 - Win32/Inject.AV 病毒>
F:\virus\qqhelper.rar ?RAR ?qqhelper\08.exe ?NSIS ?NSISdl.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\09.exe ?NSIS ?NSISdl.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\10.exe<病毒 - Win32/TrojanDownloader.Agent.NGC 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\11.exe<病毒 - Win32/TrojanDownloader.QQHelper.DL 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\12.exe<病毒 - Win32/TrojanDownloader.QQHelper.DN 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\13.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?multi.exe<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?2006b1p1.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?2006b2p1.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?2006b2p3.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?2006b2p2.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?198994020.exe<病毒 - Win32/TrojanDownloader.Agent.NKZ 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?song.bat<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?nsExec.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?bind_40240.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\14.exe ?NSIS ?bind.bat<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\15.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\16.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\17.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper.NDL 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\18.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\19.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\20.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\21.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\22.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\23.exe<病毒 - Win32/TrojanDownloader.QQHelper.KI 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\24.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\25.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\26.exe<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\27.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\28.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\29.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\30.exe<病毒 - Win32/TrojanDownloader.QQHelper.OP 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\31.exe ?NSIS ?setup.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\32.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\33.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\34.exe<病毒 - Win32/TrojanDownloader.QQHelper.NDD 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\35.exe<病毒 - Win32/TrojanDownloader.QQHelper.RK 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\36.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\37.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\38.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\39.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\40.exe ?RAR ?dodolook246.exe ?NSIS ?System.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\40.exe ?RAR ?dodolook246.exe ?NSIS ?1145.exe ?NSIS ?System.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\40.exe ?RAR ?dodolook246.exe ?NSIS ?1145.exe ?NSIS ?DoSSSetup.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\40.exe ?RAR ?dodolook246.exe ?NSIS ?1145.exe ?NSIS ?acpidisk.sys<病毒 - Win32/Adware.Cinmus 应用程序变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\40.exe ?RAR ?bind_50454.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\41.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\42.exe<病毒 - Win32/TrojanDownloader.QQHelper.TW 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\43.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\44.exe<病毒 - Win32/TrojanDownloader.QQHelper.NAR 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\45.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\46.exe<病毒 - Win32/TrojanDownloader.QQHelper.UP 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\47.exe<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\48.exe<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\49.exe ?RAR ?dodolook144.exe ?NSIS ?System.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\49.exe ?RAR ?dodolook144.exe ?NSIS ?268.exe ?NSIS ?System.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\49.exe ?RAR ?dodolook144.exe ?NSIS ?268.exe ?NSIS ?DoSSSetup.dll<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\49.exe ?RAR ?dodolook144.exe ?NSIS ?268.exe ?NSIS ?acpidisk.sys<病毒 - Win32/Adware.Cinmus 应用程序变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\49.exe ?RAR ?bind_50080.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\50.exe<病毒 - Win32/TrojanDownloader.QQHelper.NDL 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\51.exe<病毒 - Win32/TrojanDownloader.QQHelper.NDL 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\52.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\53.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\54.exe<病毒 - 正常>
F:\virus\qqhelper.rar ?RAR ?qqhelper\55.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\56.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\57.exe<病毒 - Win32/TrojanDownloader.Agent.NGC 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\58.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\59.exe<病毒 - Win32/TrojanDownloader.QQHelper.KX 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\60.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\virus\qqhelper.rar ?RAR ?qqhelper\61.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\62.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\63.exe<病毒 - 可能是 Win32/Agent.ABE 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\64.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\65.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCB 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\66.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\67.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\68.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCN 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\69.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\70.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\71.exe<病毒 - 可能是 Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\72.exe<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\73.exe<病毒 - Win32/TrojanDownloader.QQHelper.NCO 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\74.exe<病毒 - Win32/TrojanDownloader.QQHelper.NDF 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\00.dll<病毒 - Win32/TrojanDownloader.QQHelper.Z 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\02.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\03.dll<病毒 - Win32/TrojanDownloader.Delf.NOP 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\04.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\05.dll<病毒 - Win32/TrojanDownloader.QQHelper.FU 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\06.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\07.dll<病毒 - Win32/TrojanDownloader.QQHelper.MO 木马>
F:\virus\qqhelper.rar ?RAR ?qqhelper\08.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\09.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\10.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\11.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
F:\virus\qqhelper.rar ?RAR ?qqhelper\12.dll<病毒 - Win32/TrojanDownloader.QQHelper 木马变种>
已扫描文件数量: 104
已发现病毒数量: 84
完成时间: 13:10:00 总共扫描时间: 9 秒 (00:00:09)

注意:
[7] 文件可能感染了未知病毒。

显示全部楼层 · 发表于 2007-7-31 13:12:06

偶慢了

雨伞一个不剩~

显示全部楼层 · 发表于 2007-7-31 13:13:23

ArcaVir

OK c:\malware\qqhelper.rar
VIR: Downloader.Qqhelper.Fu c:\malware\qqhelper.rar<RAR>:00.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ve c:\malware\qqhelper.rar<RAR>:01.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ep c:\malware\qqhelper.rar<RAR>:02.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:03.exe
VIR: Downloader.Qqhelper.Og c:\malware\qqhelper.rar<RAR>:03.exe<UPX>:03.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Fu c:\malware\qqhelper.rar<RAR>:04.exe
ACTION OK LEAVE
VIR: Downloader.Small.Ehp c:\malware\qqhelper.rar<RAR>:01.dll
ACTION OK LEAVE
VIR: Variant:Downloader.Qqhelper.Kx c:\malware\qqhelper.rar<RAR>:06.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Lz c:\malware\qqhelper.rar<RAR>:06.exe<UPX>:06.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Kn c:\malware\qqhelper.rar<RAR>:07.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:08.exe
OK c:\malware\qqhelper.rar<RAR>:08.exe<NSIS>:NSISdl.dll
OK c:\malware\qqhelper.rar<RAR>:09.exe
OK c:\malware\qqhelper.rar<RAR>:09.exe<NSIS>:NSISdl.dll
OK c:\malware\qqhelper.rar<RAR>:10.exe
VIR: Downloader.Qqhelper.Di c:\malware\qqhelper.rar<RAR>:10.exe<UPX>:10.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:11.exe
VIR: Downloader.Qqhelper.Dl c:\malware\qqhelper.rar<RAR>:11.exe<UPX>:11.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Dn c:\malware\qqhelper.rar<RAR>:12.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Dv c:\malware\qqhelper.rar<RAR>:13.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:14.exe
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:multi.exe
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:2006b1p1.dll
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:2006b2p1.dll
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:2006b2p3.dll
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:2006b2p2.dll
VIR: Downloader.Small.Dca c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:198994020.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:song.bat
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:nsExec.dll
VIR: Downloader.Qqhelper.Dv c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:bind_40240.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:bind.bat
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:file10
OK c:\malware\qqhelper.rar<RAR>:14.exe<NSIS>:file11
VIR: Downloader.Qqhelper.Ep c:\malware\qqhelper.rar<RAR>:15.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Fb c:\malware\qqhelper.rar<RAR>:16.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Tx c:\malware\qqhelper.rar<RAR>:17.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Fu c:\malware\qqhelper.rar<RAR>:18.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Gen c:\malware\qqhelper.rar<RAR>:19.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.If c:\malware\qqhelper.rar<RAR>:20.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Iy c:\malware\qqhelper.rar<RAR>:21.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ju c:\malware\qqhelper.rar<RAR>:22.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:23.exe
VIR: Downloader.Qqhelper.Ki c:\malware\qqhelper.rar<RAR>:23.exe<UPX>:23.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Kj c:\malware\qqhelper.rar<RAR>:24.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Km c:\malware\qqhelper.rar<RAR>:25.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ml c:\malware\qqhelper.rar<RAR>:26.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Nw c:\malware\qqhelper.rar<RAR>:27.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:28.exe
VIR: Downloader.Qqhelper.Of c:\malware\qqhelper.rar<RAR>:28.exe<UPX>:28.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Op c:\malware\qqhelper.rar<RAR>:29.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Op c:\malware\qqhelper.rar<RAR>:30.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:31.exe
VIR: Downloader.Qqhelper.Qz c:\malware\qqhelper.rar<RAR>:31.exe<NSIS>:setup.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:31.exe<UPX>:31.exe
VIR: Downloader.Qqhelper.Qz c:\malware\qqhelper.rar<RAR>:31.exe<UPX>:31.exe<NSIS>:setup.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Rb c:\malware\qqhelper.rar<RAR>:32.exe
ACTION OK LEAVE
VIR: Downloader.Agent.Aym c:\malware\qqhelper.rar<RAR>:33.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:34.exe
VIR: Downloader.Qqhelper.Rk c:\malware\qqhelper.rar<RAR>:35.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Rv c:\malware\qqhelper.rar<RAR>:36.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Sl c:\malware\qqhelper.rar<RAR>:37.exe
ACTION OK LEAVE
VIR: Trojan.Dropper.Agent.Ayy c:\malware\qqhelper.rar<RAR>:38.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Op c:\malware\qqhelper.rar<RAR>:39.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:40.exe
VIR: Variant:Adware.Cinmus.F c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe<NSIS>:System.dll
OK c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe<NSIS>:1145.exe
OK c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe<NSIS>:1145.exe<NSIS>:System.dll
VIR: Adware.Cinmus.F c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe<NSIS>:1145.exe<NSIS>:DoSSSetup.dll
ACTION OK LEAVE
VIR: Adware.Cinmus.F c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:dodolook246.exe<NSIS>:1145.exe<NSIS>:acpidisk.sys
ACTION OK LEAVE
VIR: Downloader.Agent.Bbv c:\malware\qqhelper.rar<RAR>:40.exe<RAR>:bind_50454.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Qz c:\malware\qqhelper.rar<RAR>:41.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Tw c:\malware\qqhelper.rar<RAR>:42.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Tz c:\malware\qqhelper.rar<RAR>:43.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ud c:\malware\qqhelper.rar<RAR>:44.exe
ACTION OK LEAVE
VIR: Downloader.Adload.Jj c:\malware\qqhelper.rar<RAR>:45.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Uk c:\malware\qqhelper.rar<RAR>:46.exe
ACTION OK LEAVE
VIR: Downloader.Adload.Jj c:\malware\qqhelper.rar<RAR>:47.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Op c:\malware\qqhelper.rar<RAR>:48.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:49.exe
VIR: Variant:Adware.Cinmus.F c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe<NSIS>:System.dll
OK c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe<NSIS>:268.exe
OK c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe<NSIS>:268.exe<NSIS>:System.dll
VIR: Adware.Cinmus.U c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe<NSIS>:268.exe<NSIS>:DoSSSetup.dll
ACTION OK LEAVE
VIR: Adware.Cinmus.U c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:dodolook144.exe<NSIS>:268.exe<NSIS>:acpidisk.sys
ACTION OK LEAVE
VIR: Downloader.Agent.Bbv c:\malware\qqhelper.rar<RAR>:49.exe<RAR>:bind_50080.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Uw c:\malware\qqhelper.rar<RAR>:50.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Uw c:\malware\qqhelper.rar<RAR>:51.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Rb c:\malware\qqhelper.rar<RAR>:52.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Dv c:\malware\qqhelper.rar<RAR>:53.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Wm c:\malware\qqhelper.rar<RAR>:54.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ve c:\malware\qqhelper.rar<RAR>:55.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:56.exe
VIR: Downloader.Qqhelper.Vj c:\malware\qqhelper.rar<RAR>:56.exe<UPX>:56.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:57.exe
OK c:\malware\qqhelper.rar<RAR>:57.exe<UPX>:57.exe
OK c:\malware\qqhelper.rar<RAR>:58.exe
VIR: Downloader.Qqhelper.Vk c:\malware\qqhelper.rar<RAR>:58.exe<UPX>:58.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:59.exe
VIR: Downloader.Qqhelper.Vm c:\malware\qqhelper.rar<RAR>:59.exe<UPX>:59.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Vn c:\malware\qqhelper.rar<RAR>:60.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Vo c:\malware\qqhelper.rar<RAR>:61.exe
ACTION OK LEAVE
VIR: Downloader.Agent.Aym c:\malware\qqhelper.rar<RAR>:62.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Vr c:\malware\qqhelper.rar<RAR>:63.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Rg c:\malware\qqhelper.rar<RAR>:64.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Wd c:\malware\qqhelper.rar<RAR>:65.exe
ACTION OK LEAVE
VIR: Downloader.Small.Eua c:\malware\qqhelper.rar<RAR>:66.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Wl c:\malware\qqhelper.rar<RAR>:67.exe
ACTION OK LEAVE
VIR: Trojan.Pakes.Z c:\malware\qqhelper.rar<RAR>:68.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Wp c:\malware\qqhelper.rar<RAR>:69.exe
ACTION OK LEAVE
VIR: Downloader.Small.Eua c:\malware\qqhelper.rar<RAR>:70.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Wr c:\malware\qqhelper.rar<RAR>:71.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ws c:\malware\qqhelper.rar<RAR>:72.exe
ACTION OK LEAVE
VIR: Downloader.Small.Evq c:\malware\qqhelper.rar<RAR>:73.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Xf c:\malware\qqhelper.rar<RAR>:74.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Z c:\malware\qqhelper.rar<RAR>:00.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Jz c:\malware\qqhelper.rar<RAR>:02.dll
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:03.dll
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe
VIR: Adware.Softomate.X c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:0602323.dll
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:basis.xml
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:version.txt
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:gd_ad.html
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:block.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:-.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:+.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:clean.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:weather.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:tv.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:ring.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:mp3.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:film.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:icons.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:home.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:find.bmp
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:060600.exe<NSIS>:0602323.crc
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:2561.exe
VIR: Adware.Admoke.S c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:2561.exe<ASPack>:2561.exe
ACTION OK LEAVE
OK c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:38092.exe
VIR: Trojan.Clicker.Bho.H c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:38092.exe<PECompact2>:38092.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Dv c:\malware\qqhelper.rar<RAR>:03.dll<DLLRES>:400713.exe
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ft c:\malware\qqhelper.rar<RAR>:04.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Fu c:\malware\qqhelper.rar<RAR>:05.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Kf c:\malware\qqhelper.rar<RAR>:06.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Mo c:\malware\qqhelper.rar<RAR>:07.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Qg c:\malware\qqhelper.rar<RAR>:08.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Rp c:\malware\qqhelper.rar<RAR>:09.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ts c:\malware\qqhelper.rar<RAR>:10.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Ty c:\malware\qqhelper.rar<RAR>:11.dll
ACTION OK LEAVE
VIR: Downloader.Qqhelper.Vl c:\malware\qqhelper.rar<RAR>:12.dll
ACTION OK LEAVE

Scan summary:

------------------------

Scanned:

Files          :  124
Directories    :  1
Archives       :  15
Files in archives :  151
Embedded files :  13
Embedded objects  :  0
Excluded files :  0
All             :  152

Found:

Infected       :  95
Cured          :  0
Deleted          :  0
Renamed          :  0

Remaining infected : 95

显示全部楼层 · 发表于 2007-7-31 13:49:57

费尔只杀74个

[病毒样本] 【样本合集】qqhelper

本帖子中包含更多资源