MD5: F6C1B0]

自由

微点又无视 ，上报。今天运行了3个微点无视的，上报了3个。
Hello,
111.exe_ - Trojan.RAR.Qhost.b
New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 自由 于 2007-9-1 18:21 编辑 ]

tracydk

确实是病毒
2007-09-01 18:23:01    修改文件      操作:阻止
进程路径:F:\病毒样本\样本\111.exe
文件路径:C:\WINDOWS\system32\drivers\etc\hosts
触发规则:所有程序规则->系统文件->%WinDir%\system32\drivers\etc\hosts


2007-09-01 18:23:02    修改文件      操作:阻止
进程路径:F:\病毒样本\样本\111.exe
文件路径:C:\WINDOWS\system32\drivers\etc\hosts
触发规则:所有程序规则->系统文件->%WinDir%\system32\drivers\etc\hosts


红伞也挂,上报

hj5abc

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
127.0.0.1 www.sq1000.net
127.0.0.1 www.175rxjhsf.com
127.0.0.1 www.zc1000.com
127.0.0.1 www.cz1000.com
127.0.0.1 www.sq1000.net
127.0.0.1 www.zhuxian4.com

siman.yu

过AVAST,NOD32

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 1396
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\111.exe - Suspicious of Win32.Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

promised

这种东西入库只是徒劳

睡眼朦胧

过卡巴，红伞

taihuxian

运行有什么危害？

红心王子

已删除: 木马程序 Trojan.RAR.Qhost.b        文件: C:\Documents and Settings\Administrator\桌面\样本.rar\111.exe/hosts

自由

在我电脑，到目前一切正常。中午运行的。好像没有什么危害。