qqhelper[MD5: 313B18 DB0E8F 6E27AF 99034D 71B4AE]

显示全部楼层 · 发表于 2007-11-25 15:04:34

C:\ABC\71ajegd.sys - 特征码 'Trojan-Downloader.Win32.Agent.bbb' 被发现
C:\ABC\bi6l2.dll - 特征码 'Virus.Win32.Agent.JZN' 被发现
C:\ABC\kbd6d5itd.sys - 特征码 'Trojan-Downloader.Win32.Agent.bbb' 被发现
C:\ABC\my.exe - 特征码 'Trojan-Downloader.Win32.QQHelper.va' 被发现
C:\ABC\tempaq - 特征码 'Virus.Win32.Agent.JQE' 被发现

显示全部楼层 · 发表于 2007-11-25 15:05:47

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> tempaq
   [DETECTION] Is the Trojan horse TR/Drop.Agent.cpk.1
  --> kbd6d5itd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> bi6l2.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 71ajegd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-25 15:06:16

C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » tempaq - a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » kbd6d5itd.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » bi6l2.dll - a variant of Win32/TrojanDownloader.Agent.NPO trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » 71ajegd.sys - a variant of Win32/Rootkit.Agent.NCK trojan

显示全部楼层 · 发表于 2007-11-25 15:07:10

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.QQHelper.ahs 檔案: C:\Documents and Settings\kato9096\桌面\161685.rar/my.exe

kis7,沒报的已上报

显示全部楼层 · 发表于 2007-11-25 15:09:22

检测到：木马程序 Trojan-Downloader.Win32.QQHelper.ahs 文件: C:\Documents and Settings\Administrator\桌面\样本.rar/my.exe
只有一个？

显示全部楼层 · 发表于 2007-11-25 15:10:54

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> tempaq
   [DETECTION] Is the Trojan horse TR/Drop.Agent.cpk.1
  --> kbd6d5itd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> bi6l2.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 71ajegd.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
4个，剩下的一个上报！

显示全部楼层 · 发表于 2007-11-25 15:11:58

剩下的一个，误报王杀了！

25:11:2007 15:11:31 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\Administrator\桌面\my.exe
File scanned: C:\Documents and Settings\Administrator\桌面\my.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.QQHelper.va"
25:11:2007 15:11:31 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2007-11-25 15:15:15

"Win32:Agent-JZN [Trj]" has been found in "样本.rar\tempaq\[UPX]\[Embedded#116fc]".
"Win32:Agent-KYE [Trj]" has been found in "样本.rar\kbd6d5itd.sys".
"Win32:Agent-JZN [Trj]" has been found in "样本.rar\bi6l2.dll".
"Win32:Agent-KYE [Trj]" has been found in "样本.rar\71ajegd.sys".

显示全部楼层 · 发表于 2007-11-25 15:15:26

过毒霸2008

显示全部楼层 · 发表于 2007-11-25 15:20:35

咖啡不报：5170病毒库。

[病毒样本] qqhelper[MD5: 313B18 DB0E8F 6E27AF 99034D 71B4AE]

本帖子中包含更多资源

4

Avast! 4