[MD5: E927DE 7BA4D1]

显示全部楼层 · 发表于 2007-8-7 15:05:05

对象: V12003518.EPE
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\样本.rar
Status: 已发现病毒
病毒: Backdoor.Nethief.52.1 (BD 引擎)
对象: theopen.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\样本.rar
Status: 已发现病毒
病毒: Trojan.QHost.G (BD 引擎)

显示全部楼层 · 发表于 2007-8-7 15:06:00

微点：
木马名称:Trojan.Win32.Qhost.bz
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\THEOPEN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-8-7 15:22:13

Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\样本[1].rar.
Infection: Trojan.Win32.Qhost.ke
Action: none.
Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\VKRJBE8R\样本[1].rar.
Infection: Trojan.Win32.Qhost.ke
Action: none.

显示全部楼层 · 发表于 2007-8-7 15:23:02

ashampoo兩個

显示全部楼层 · 发表于 2007-8-7 15:31:26

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\
  样本.rar
[0] Archive type: RAR
--> V12003518.EPE
      [DETECTION] Is the Trojan horse TR/Pakes
      [WARNING] Infected files in archives cannot be repaired!
--> theopen.exe
      [DETECTION] Is the Trojan horse TR/Qhost.IS
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46e686fb.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-7 15:48:43

反病毒专家 AntiVirusKit 2007 扫描病毒日志记录
版本
双引擎反病毒签名 8/7/2007
开始时间: 8/7/2007 15:46
引擎: KAV 引擎 (AVK 17.6682), AVST 引擎 (AVKB 17.328)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: theopen.exe
路径: D:\病毒库\样本
狀態: 已发现病毒
病毒: Trojan.Win32.Qhost.ke (KAV 引擎), Win32:Qhost-AD [Trj] (AVST 引擎)
对象: V12003518.EPE
路径: D:\病毒库\样本
狀態: 已发现病毒
病毒: Win32:Pakes-LA [Trj] (AVST 引擎)
扫描完成: 8/7/2007 15:46
已检查 2 个文件
已发现 2 个染毒文件

显示全部楼层 · 发表于 2007-8-7 16:33:43

赛门铁克报

显示全部楼层 · 发表于 2007-8-7 16:55:12

另外一个都在报壳。。。不知道是什么东西

显示全部楼层 · 发表于 2007-8-7 16:57:34

--> V12003518.EPE
      [DETECTION] Is the Trojan horse TR/Pakes
      [WARNING] Infected files in archives cannot be repaired!
--> theopen.exe
      [DETECTION] Is the Trojan horse TR/Qhost.IS
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46eb340f.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

[病毒样本] [MD5: E927DE 7BA4D1]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块