来几个

显示全部楼层 · 发表于 2008-1-26 18:46:27

来几个
http://www.tv3800.cn/dqq.rar
http://whq85289598.81free.com/QQqqq.exe
http://user.free2.77169.net/sky126/smss.exe
http://down.tt86.com/jl/qzone.rar
ftp://wxr9421.31344.com/wwwroot/wudiwg.rar%20%20
http://wotsetcr.s117.288idc.com/wist.rar
http://j.thec.cn/wyhbba007/hfdaoqq.rar

[ 本帖最后由流清泉于 2008-1-26 19:04 编辑 ]

显示全部楼层 · 发表于 2008-1-26 19:27:28

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.QQPass.rpn
病毒： Backdoor.Win32.Agent.yfo
病毒： Backdoor.Gpigeon.GEN
病毒： Trojan.PSW.Win32.QQPass.zbt
病毒： Backdoor.Win32.Agent.yug

用户来源：互联网

软件版本：20.28.52

显示全部楼层 · 发表于 2008-1-26 19:54:31

全灭

显示全部楼层 · 发表于 2008-1-26 19:54:38

第4个好像发过，第5个不能下

费尔报4个，第1个miss

Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-1-26 19:42:10,TrojanPSW.Agent.vdm.henw.dll,木马,77,C:\Documents and Settings\77\My Documents\hfdaoqq.rar>>daoQQhack\黑防免杀\盗Q黑侠免杀.exe>>emb-2.dll,Manual scan
2008-1-26 19:42:10,Rootkit.Vanti.bmw.ukaa,木马,77,C:\Documents and Settings\77\My Documents\hfdaoqq.rar>>daoQQhack\黑防免杀\盗Q黑侠免杀.exe>>emb-1.exe,Manual scan
2008-1-26 19:42:09,TrojanPSW.QQPass.uj.fxgg,木马,77,C:\Documents and Settings\77\My Documents\hfdaoqq.rar>>daoQQhack\dqhx0127.exe,Manual scan
2008-1-26 19:41:13,Backdoor.Emogen.e.rigq,后门,77,C:\Documents and Settings\77\My Documents\smss.exe,Manual scan
2008-1-26 19:40:59,TrojanPSW.QQPass.are.ebhr,木马,77,C:\Documents and Settings\77\My Documents\QQqqq.exe,Manual scan

显示全部楼层 · 发表于 2008-1-26 20:22:59

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Agent.yug
病毒： Trojan.PSW.Win32.QQPass.zbt
病毒： Backdoor.Gpigeon.GEN
病毒： Trojan.PSW.QQPass.rpn
病毒： Backdoor.Win32.Agent.yfo

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.52

ftp://wxr9421.31344.com/wwwroot/wudiwg.rar%20%20

这个干啥的，打不开呐？！

显示全部楼层 · 发表于 2008-1-27 02:39:59

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\wist.rar'
C:\TDDOWNLOAD\
  wist.rar
[0] Archive type: RAR
--> wist.exe
Begin scan in 'C:\TDDOWNLOAD\dqq.rar'
C:\TDDOWNLOAD\
  dqq.rar
[0] Archive type: RAR
--> DQQ.exe
      [DETECTION] Contains detection pattern of the SPR/QQBrute.A program
      [WARNING] Infected files in archives cannot be repaired!
--> FKbutton.ocx
--> Hasher.log
--> TDSoft_MacCheck_V1.0.ocx
发表帖 --> ￋﾵￃ?.txt
--> ￗﾢﾲ￡ﾹﾤﾾ￟.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
子[完成后可按 Ctr --> ￗﾢﾲ￡ￋﾵￃ?.txt
   [WARNING] The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\hfdaoqq.rar'
C:\TDDOWNLOAD\
  hfdaoqq.rar
[0] Archive type: RAR
l+Enter 发布]  预览帖子  恢 --> daoQQhack\3.0ﾰ￦ￋﾵￃ?.txt
--> daoQQhack\dqhx0127.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Sma.dat.4.B
      [WARNING] Infected files in archives cannot be repaired!
--> daoQQhack\ￇ￥ﾳ�.bat
--> daoQQhack\ASPￊￕ￐ￅ\dqhx.asp
--> daoQQhack\ﾺￚﾷ￀ￃ￢￉ﾱ\ﾵ￁Qﾺￚￏ￀ￃ￢￉ﾱ.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Ntboot.A.1 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> daoQQhack\ﾺￚﾷ￀ￃ￢￉ﾱ.txt
   [WARNING] The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\QQqqq.exe'
C:\TDDOWNLOAD\
  QQqqq.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
         [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\qzone.rar'
C:\TDDOWNLOAD\
  qzone.rar
[0] Archive type: RAR
复数据  清空内容    --> QQ﾿ￕﾼ￤￈ￋￆ?ﾾﾫ￁￩.exe
      [1] Archive type: Runtime Packed
      --> Object
默认表情 --> ﾰ￦ﾱﾾￋﾵￃ?.txt
--> ￃ￢ￔ?￉￹ￃ?.txt
--> ￉�ﾼﾶﾷﾽﾷﾨ.txt
Begin scan in 'C:\TDDOWNLOAD\smss.exe'
C:\TDDOWNLOAD\
  smss.exe

End of the scan: 2008年1月26日  10:39
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   24 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   19 Files not concerned
   5 Archives were scanned
   8 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-27 02:44:54

扫描报告
2008年1月27日 2:44:56 - 2:44:58
计算机名称: BA98EBFDBC7C489
扫描类型: 扫描目标
目标: G:\v\dqq.rar

--------------------------------------------------------------------------------

结果: 找到 1 恶意软件
Backdoor.Win32.Hupigon.ashy (病毒)
G:\v\dqq.rar\注册工具.exe

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 8
未扫描: 0
结果:
病毒: 1
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2008-01-26_03
间谍软件: 2008-01-26_03
扫描引擎:
F-Secure AVP: 7.00.171, 2008-01-26
F-Secure Hydra: 2.04.7360, 2008-01-26
扫描选项:
扫描所有文件
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

显示全部楼层 · 发表于 2008-1-27 02:46:35

扫描报告
2008年1月27日 2:46:46 - 2:46:46
计算机名称: BA98EBFDBC7C489
扫描类型: 扫描目标
目标: G:\v\wist.rar

--------------------------------------------------------------------------------

结果: 找到 1 恶意软件
Packed.Win32.PolyCrypt.b (病毒)
G:\v\wist.rar\wist.exe\rewrt.exe

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 3
未扫描: 0
结果:
病毒: 1
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2008-01-26_03
间谍软件: 2008-01-26_03
扫描引擎:
F-Secure AVP: 7.00.171, 2008-01-26
F-Secure Hydra: 2.04.7360, 2008-01-26
扫描选项:
扫描所有文件
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

显示全部楼层 · 发表于 2008-1-27 02:47:47

扫描报告
2008年1月27日 2:48:01 - 2:48:01
计算机名称: BA98EBFDBC7C489
扫描类型: 扫描目标
目标: G:\v\hfdaoqq.rar

--------------------------------------------------------------------------------

结果: 找到 2 恶意软件
Trojan-PSW.Win32.QQPass.uj (病毒)
G:\v\hfdaoqq.rar\daoQQhack\dqhx0127.exe
Backdoor.Win32.Visel.u (病毒)
G:\v\hfdaoqq.rar\daoQQhack\黑防免杀\盗Q黑侠免杀.exe

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 7
未扫描: 0
结果:
病毒: 2
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2008-01-26_03
间谍软件: 2008-01-26_03
扫描引擎:
F-Secure AVP: 7.00.171, 2008-01-26
F-Secure Hydra: 2.04.7360, 2008-01-26
扫描选项:
扫描所有文件
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

显示全部楼层 · 发表于 2008-1-27 12:40:40

该杀的都杀了..

Sign of "Win32:QQPass-OQ [Trj]" has been found in "http://whq85289598.81free.com/QQqqq.exe\[Upack]\[MaskPE]\[Embedded#DLLFILE]\[NsPack]" file.
Sign of "Win32:Gamania-DG [Trj]" has been found in "http://user.free2.77169.net/sky126/smss.exe" file.
Sign of "Win32:DoomBot-L [Wrm]" has been found in "http://wotsetcr.s117.288idc.com/wist.rar\wist.exe" file.
Sign of "Win32:QQPass-NV [Trj]" has been found in "http://j.thec.cn/wyhbba007/hfdaoqq.rar\daoQQhack\dqhx0127.exe\[FSG]\[Embedded#QQ]" file.

[已鉴定] 来几个

29/5