4个

qianwenxiang

两个鸽子两个盗Q的

FBAV

绝对的郁闷
MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\新建文-件夹\dsffsd]
                    …………发现Spy！报告: [4]
文件信息:  大小:762368  MD5:b120a28431b919208736d00af9b81386

文件数:4   病毒数:1  比重:0.25
OK  扫描完毕！
  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

[ 本帖最后由 FBAV 于 2007-10-4 18:21 编辑 ]

Nerazzurri

扫描进行于：2007-10-4 18:20:33
扫描日志
NOD32版本 2571 (20071004) NT
命令行： F:\Documents and Settings\kafan\桌面\新建文件夹.rar

日期： 4.10.2007  时间：18:20:37
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\新建文件夹.rar
F:\Documents and Settings\kafan\桌面\新建文件夹.rar >>RAR >>dsffsd - Win32/Hupigon 木马的变种
F:\Documents and Settings\kafan\桌面\新建文件夹.rar >>RAR >>QQ1.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\Documents and Settings\kafan\桌面\新建文件夹.rar >>RAR >>QQ2.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\Documents and Settings\kafan\桌面\新建文件夹.rar >>RAR >>修改过的.exe - Win32/Hupigon 木马的变种
已扫描的文件数目：4
已发现的病毒数目：4
完成时间： 18:20:41 总扫描时间：4 秒 (00:00:04)

Nerazzurri

Starting the file scan:

Begin scan in 'F:\Documents and Settings\kafan\桌面\新建文件夹.rar'
F:\Documents and Settings\kafan\桌面\新建文件夹.rar
  [0] Archive type: RAR
  --> dsffsd
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> QQ1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Stealer.34166
  --> QQ2.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.XY
  --> Ð޸ĹýµÄ.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-10-4 18:21:40
Scanning Log
NOD32 version 2571 (20071004) NT
Command line: C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar
Operating memory - is OK

Date: 4.10.2007  Time: 18:21:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar
C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar ?RAR ?dsffsd - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar ?RAR ?QQ1.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar ?RAR ?QQ2.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\新建文件夹.rar ?RAR ?修改过的.exe - a variant of Win32/Hupigon trojan
Number of scanned files: 5
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 18:21:45 Total scanning time: 2 sec (00:00:02)

yangpizhi

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         bbs.kafan.cn/attachment.php?aid=135251
Information:         Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs

Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.18, VDF 7.0.0.48

残缺的唯美

Scanned:
Files: 5
Not scanned: 0
Result:
Viruses: 4
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0

红心王子

2007-10-4        18:32:42        1191493962        Administrator        2152        Sign of "Win32:Hupigon-EA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\dsffsd" file.  
2007-10-4        18:32:45        1191493965        Administrator        2152        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\QQ1.exe\[NsPack]\[Embedded#DLLFILE]\[Upack]" file.  
2007-10-4        18:32:45        1191493965        Administrator        2152        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\QQ2.exe\[NsPack]\[Embedded#DLLFILE]\[Upack]" file.  
2007-10-4        18:32:45        1191493965        Administrator        2152        Sign of "Win32:Hupigon-EA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\修改过的.exe" file.

taihuxian

卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135251 is infected with Backdoor.Win32.Hupigon.cda virus

微点卫士

木马名称:Backdoor.Win32.Huigezi.xeu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DSFFSD
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Huigezi.xeu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\修改过的.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQ1.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSWFGQQ2.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQ2.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSWFGQQ2.DLL
是否删除木马程序及其衍生物?