来个＋3

流清泉

http://www.jdzblog.com/UploadFiles/2008-1/102146535906.rar
http://down.tt86.com/jl/qzone.rar
还有个雷峰的空间
http://xuebinhack1.ys168.com/
这个
http://erex.go3.icpcn.com/xiazai/QQ信息炸弹v1.0.rar
http://shuaixi.cn/TKGZ.rar
http://bird972.web1.7it7.cn/常用工具.rar
http://hckl.9k9k.cn/mkkh.exe

[ 本帖最后由 流清泉 于 2008-2-7 21:12 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\102146535906.rar'
E:\102146535906.rar
  [0] Archive type: RAR
  --> new_33.EXE
      [DETECTION] Contains detection pattern of the dropper DR/PCK.PolyCrypt.B.1359
      [INFO]      The file was deleted!
Begin scan in 'E:\qzone.rar'
E:\qzone.rar
  [0] Archive type: RAR
  --> QQ¿Õ¼äÈËÆø¾«Áé.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQzone.A.312
      [WARNING]   The file was ignored!


Starting the file scan:

Begin scan in 'E:\印章制作.rar'
Begin scan in 'E:\qqq.rar'
E:\qqq.rar
  [0] Archive type: RAR
  --> qq.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.bm.1 Backdoor server programs
      [WARNING]   The file was ignored!
Begin scan in 'E:\QB.rar'
E:\QB.rar
  [0] Archive type: RAR
  --> Ãâ·ÑË¢QB.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!
Begin scan in 'E:\免费刷QB.rar'
E:\免费刷QB.rar
  [0] Archive type: RAR
  --> Ãâ·ÑË¢QB.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!

Starting the file scan:

Begin scan in 'E:\TKGZ.rar'
E:\TKGZ.rar
  [0] Archive type: RAR
  --> ºÚ·À»Ò¸ë×ÓÍÑ¿Ç°æ.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.SN.3
  --> Cache\CServer.dat
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.dsx.27 Backdoor server programs
      [WARNING]   The file was ignored!

Starting the file scan:

Begin scan in 'E:\mkkh.exe'
E:\mkkh.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [INFO]      The file was deleted!

Starting the file scan:

Begin scan in 'E:\常用工具.rar'
E:\常用工具.rar
  [0] Archive type: RAR
  --> 3322¿Í»§¶Ë.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> sɨÃèÆ÷.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> ntscan.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!

印章制作.rar
The file '########.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 6.38.1.114.

QQ信息炸弹v1.0.rar
The file 'QQ########v1.0.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

TKGZ.rar
3722142         ################.exe         5.75 MB         MALWARE
260152         CServer.dat         743 KB         MALWARE
3722143         2007-08-15_114915.dat         5 Byte         CLEAN
3722144         2007-08-15_114915.ini         920 Byte         CLEAN
1326005         QQwry.dat         4.49 MB         CLEAN
602563         ResHacker.EXE         861 KB         KNOWN CLEAN
540254         downfile.wav         75.43 KB         CLEAN
540255         login.wav         88.36 KB         CLEAN
540256         offline.wav         86.44 KB         CLEAN
540257         setting.wav         128.84 KB         CLEAN
540258         upfile.wav         73.56 KB         CLEAN
3722145         Operate.ini         530 Byte         CLEAN

常用工具.rar
3722149         3322######.exe         1.68 MB         UNDER ANALYSIS
3722150         ############.exe         5.96 MB         UNDER ANALYSIS

上报~

The file '3322######.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Hupigon.kmx. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file '############.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Hupigon.V. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Graybird 于 2008-2-8 07:23 编辑 ]

挪威的冬天

头两个金山挂

第三个里面下的
信息        2008-02-07  20:55:12        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-02-07  20:55:12        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件12个                       
信息        2008-02-07  20:55:12        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-07  20:55:12        C:\Users\挪威的冬天\Desktop\QB.rar\免费刷QB.exe        Win32.Packed.MaskPE        跳过，未处理       
病毒        2008-02-07  20:55:12        C:\Users\挪威的冬天\Desktop\qqq.rar\qq.exe        Win32.Hack.Huigezi.pv.815104        跳过，未处理       
病毒        2008-02-07  20:55:12        C:\Users\挪威的冬天\Desktop\免费刷QB.rar\免费刷QB.exe        Win32.Packed.MaskPE        跳过，未处理

无尽藏海

前两个  EAV 飘 ……
2008-2-7 20:55:39        Kernel        File  'F:\virus\102146535906.rar' was sent to ESET for analysis.        
2008-2-7 20:55:05        Kernel        File  'F:\virus\qzone.rar' was sent to ESET for analysis.





F:\virus\%C3%E2%B7%D1%CB%A2QB(1).rar » RAR » 免费刷QB.exe - a variant of Win32/Hupigon trojan
F:\virus\QB(1).rar » RAR » 免费刷QB.exe - a variant of Win32/Hupigon trojan



2008-2-7 21:03:26 Kernel File  'F:\virus\QQ信息炸弹v1.0.rar' was sent to ESET for analysis.


F:\virus\TKGZ.rar » RAR » Cache\CServer.dat - Win32/Hupigon trojan



F:\virus\常用工具.rar » RAR » 3322客户端.exe - probably a variant of Win32/Spy.Delf trojan
F:\virus\常用工具.rar » RAR » s扫描器.exe - probably a variant of Win32/Spy.Delf trojan
F:\virus\常用工具.rar » RAR » ntscan.exe - probably a variant of Win32/Spy.Delf trojan
F:\virus\常用工具.rar » RAR » 灰鸽子配置器.exe - probably a variant of Win32/Spy.Delf trojan


F:\virus\mkkh.exe - probably a variant of Win32/Genetik trojan

[ 本帖最后由 无尽藏海 于 2008-2-7 21:13 编辑 ]

Palkia

[ 本帖最后由 tvuser2007 于 2008-2-7 21:03 编辑 ]

Palkia

QQ信息炸弹v1.0.rar红伞MISS~卡巴MISS~
第二个卡巴也MISS~
上报去~

[ 本帖最后由 tvuser2007 于 2008-2-7 21:20 编辑 ]

挪威的冬天

信息炸弹那个下载不了 有防盗链

信息        2008-02-07  21:07:10        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-02-07  21:07:10        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件13个                       
信息        2008-02-07  21:07:10        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-02-07  21:07:10        C:\Users\挪威的冬天\Desktop\TKGZ.rar\黑防灰鸽子脱壳版.exe        Win32.RiskWare.Logoff.a.2047432        跳过，未处理       
病毒        2008-02-07  21:07:09        C:\Users\挪威的冬天\Desktop\TKGZ.rar\Cache\CServer.dat        Win32.Hack.Huigezi.pv.815104        跳过，未处理

Palkia

TKGZ.rar---------------迅雷卡巴都砍掉了~

Palkia

原帖由 挪威的冬天 于 2008-2-7 21:07 发表
信息炸弹那个下载不了 有防盗链

信息        2008-02-07  21:07:10        您此次查毒共查出2个病毒以及危险代码                        
信息        2008-02-07  21:07:10        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件13个                        
信息        2008-02-07  ...

你要用工具下啊~晕~我上传吧~

挪威的冬天

金山 miss