来5个

挪威的冬天

鸽子2

信息        2008-02-11  17:59:51        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-02-11  17:59:51        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个                       
信息        2008-02-11  17:59:51        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-11  17:59:51        C:\Users\挪威的冬天\Desktop\waigua.rar\waigua.exe\BindFile\waigua.exe        Win32.Hack.Huigezi.fh.764416        跳过，未处理       
病毒        2008-02-11  17:59:51        C:\Users\挪威的冬天\Desktop\qqfclp.rar\QQ飞车连喷.exe        Win32.Hack.Huigezi.uz.749136        跳过，未处理

wangjay1980

detected: Trojan program Backdoor.Win32.Hupigon.cda        File: E:\ÏÂÔØ»ùµØ\qqfclp.rar/QQ·É³µÁ¬Åç.exe
detected: Trojan program Backdoor.Win32.GrayBird.lz        File: E:\ÏÂÔØ»ùµØ\waigua.exe//data.rar/waigua.exe//PE_Patch.MaskPE//PE_Patch.MaskPE

Graybird

Starting the file scan:

Begin scan in 'E:\virus\SQQ.exe'
E:\virus\SQQ.exe
      [DETECTION] Is the Trojan horse TR/Drop.Delf.IO
      [INFO]      The file was deleted!
Begin scan in 'E:\virus\boot.exe'
E:\virus\boot.exe
      [DETECTION] Contains detection pattern of the dropper DR/PCK.PolyCrypt.B.2000
      [INFO]      The file was deleted!

Starting the file scan:

Begin scan in 'E:\virus\build0802.rar'
E:\virus\build0802.rar
  [0] Archive type: RAR
  --> ÈËÆø¾«ÁéÐÂÄêÌرð°æ\QQ¿Õ¼ä¹¤¾ß.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [WARNING]   The file was ignored!

Starting the file scan:

Begin scan in 'E:\virus\hh.exe'
E:\virus\hh.exe
      [DETECTION] Is the Trojan horse TR/Agent.31744.B.1
      [INFO]      The file was deleted!

Starting the file scan:

Begin scan in 'E:\virus\FineplusV1.43.2.exe'
E:\virus\FineplusV1.43.2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [INFO]      The file was deleted!

[ 本帖最后由 Graybird 于 2008-2-11 18:23 编辑 ]

挪威的冬天

病毒        2008-02-11  18:17:12        病毒在文件C:\Users\挪威的冬天\Desktop\boot\3.exe中        Win32.Hack.RPolyCrypt.a.36864        处理成功（操作：删除）        
病毒        2008-02-11  18:15:50        病毒在文件C:\Users\挪威的冬天\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AE9DF9QV\SQQ[1].exe中        Win32.Troj.Dropper.oc.21504        拦截成功（文件被禁止访问）        
病毒        2008-02-11  18:19:11        病毒在文件C:\Users\挪威的冬天\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8IT07D11\hh[1].exe中        QQPass.wg.61440        拦截成功（文件被禁止访问）        
病毒 2008-02-11  18:19:49 病毒在文件C:\Users\挪威的冬天\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N8PHRMQC\FineplusV1.43.2[1].exe中 Win32.Packed.MaskPE 拦截成功（文件被禁止访问）


build0802 那个 miss

mofunzone

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\waigua.exe'
C:\TDDOWNLOAD\
  waigua.exe
    [0] Archive type: RAR SFX (self extracting)
    --> DazzleFF.dll
    --> Setting\·É·ÉMix V1.0
    --> waigua.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> FF.exe
        [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\boot.exe'
C:\TDDOWNLOAD\
  boot.exe
      [DETECTION] Contains detection pattern of the dropper DR/PCK.PolyCrypt.B.2000
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\build0802.rar'
C:\TDDOWNLOAD\
  build0802.rar
    [0] Archive type: RAR
    --> ÈËÆø¾«ÁéÐÂÄêÌرð°æ\QQ¿Õ¼ä¹¤¾ß.exe
        [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ÈËÆø¾«ÁéÐÂÄêÌرð°æ\ʹÓÃ˵Ã÷.txt
        [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\FineplusV1.43.2.exe'
C:\TDDOWNLOAD\
  FineplusV1.43.2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\qqfclp.rar'
C:\TDDOWNLOAD\
  qqfclp.rar
    [0] Archive type: RAR
    --> QQ·É³µÁ¬Åç.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\SQQ.exe'
C:\TDDOWNLOAD\
  SQQ.exe
      [DETECTION] Is the Trojan horse TR/Drop.Delf.IO
      [INFO]      The file was deleted!


End of the scan: 2008年2月11日  12:00
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      3 Archives were scanned
      3 Warnings
      0 Notes

qigang

http://user.free2.77169.net//beyondvip/SQQ.exe
http://user.free2.77169.net//beyondvip/boot.exe
http://aiwai811.9lnic.com/hh.exe

woai_jolin

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Gpigeon.iqw     
病毒： Backdoor.Gpigeon.GEN     
病毒： Malicious Code           

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.10