木马3个。

显示全部楼层 · 发表于 2007-8-16 20:57:10

detected: Trojan program Trojan-PSW.Win32.QQPass.jh URL: http://bbs.kafan.cn/attachment.php?aid=114719//QQ.exe//FSG
detected: Trojan program Trojan-PSW.Win32.QQPass.qs URL: http://bbs.kafan.cn/attachment.php?aid=114720//tenyqq.exe//FSG
detected: Trojan program Trojan-PSW.Win32.Agent.ha URL: http://bbs.kafan.cn/attachment.php?aid=114721//bnb.exe//FSG

显示全部楼层 · 发表于 2007-8-16 20:59:50

没有权限。只传这些样本。

显示全部楼层 · 发表于 2007-8-16 21:01:57

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TENYQQ.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\YYBAVX.EXE
2) C:\WINDOWS.0\SYSTEM32\QQHX.DAT
3) C:\WINDOWS.0\SYSTEM32\YYBAVX.DLL
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.110\QQ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\BNB.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SHEIPP33.DLL
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-8-16 21:02:48

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Pabug.co
病毒： Trojan.PSW.QQPass.rdr
病毒： Trojan.PSW.PopTang.b

MAC 地址：00:17:31:D9:E8:29

用户来源：局域网

软件版本：20.05.32

显示全部楼层 · 发表于 2007-8-16 21:08:18

斧头KV全部命中

好像都是老毒了
QQ.rar  Trojan/PSW.Agent.cdg
bnb.rar  Trojan/Delf.ld
tenyqq.rar  Trojan/PSW.Agent.baz

显示全部楼层 · 发表于 2007-8-16 21:11:00

Start of the scan: 2007年8月16日  21:10

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\QQ.rar
  [0] Archive type: RAR
  --> QQ.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.JH.6
   [INFO]    The file was deleted!
H:\AV-TEST\tenyqq.rar
  [0] Archive type: RAR
  --> tenyqq.exe
   [DETECTION] Is the Trojan horse TR/Spy.Hacko.3
   [INFO]    The file was deleted!
H:\AV-TEST\bnb.rar
  [0] Archive type: RAR
  --> bnb.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年8月16日  21:10
Used time: 00:29 min

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   3 viruses and/or unwanted programs were found
   0 classified as suspicious:
   3 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-16 21:11:10

bnb.exe | Win32:Small-DJC [Trj]
QQ.exe | Win32:Delf-EVJ [Wrm]
tenyqq.exe | Win32:Delf-EVJ [Wrm]

显示全部楼层 · 发表于 2007-8-16 21:13:17

显示全部楼层 · 发表于 2007-8-16 21:45:52

[病毒样本] 木马3个。

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源