来几个

显示全部楼层 · 发表于 2008-2-21 16:26:49

http://user.free2.77169.net/qq000/download/btjsq.rar
http://ds111.t35.com/cgx.rar
http://p.thec.cn/xinxin2008/qq/QQcz.rar
http://p.thec.cn/xinxin2008/flqq.rar
http://cm999.hostfree.com.cn/tt/QQ2008gj.rar

[ 本帖最后由流清泉于 2008-2-21 16:32 编辑 ]

显示全部楼层 · 发表于 2008-2-21 16:29:36

Starting the file scan:

Begin scan in 'E:\Antivir\btjsq.rar'
E:\Antivir\btjsq.rar
  [0] Archive type: RAR
  --> BT¼ÓËÙÆ÷.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [WARNING] The file was ignored!

Starting the file scan:
Begin scan in 'E:\Antivir\cgx.rar'
E:\Antivir\cgx.rar
  [0] Archive type: RAR
  --> ³Â¹ÚÏ£Í¼Æ¬\³Â¹ÚÏ£Â¼Ïó.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

Starting the file scan:
Begin scan in 'E:\Antivir\QQcz.rar'
E:\Antivir\QQcz.rar
  [0] Archive type: RAR
  --> QQ³åÖµ»ú.exe
   [DETECTION] Is the Trojan horse TR/Drop.bdz.2278056
   [WARNING] The file was ignored!
Begin scan in 'E:\Antivir\flqq.rar'
E:\Antivir\flqq.rar
  [0] Archive type: RAR
  --> flqq\QQÃÜÂë±©Á¦ÆÆ½âÈí¼þV3.0.exe
   [DETECTION] Is the Trojan horse TR/Drop.bdz.2278056
   [WARNING] The file was ignored!
Begin scan in 'E:\Antivir\QQ2008gj.rar'
E:\Antivir\QQ2008gj.rar
  [0] Archive type: RAR
  --> QQ2008×îÐÂ¿ÉÓÃ¹Ò»úÍâ¹Ò.exe
   [DETECTION] Is the Trojan horse TR/Drop.bdz.2278056
   [WARNING] The file was ignored!

上报~

[ 本帖最后由 Graybird 于 2008-2-21 16:40 编辑 ]

显示全部楼层 · 发表于 2008-2-21 16:53:11

F:\virus\QQcz.rar » RAR » QQ冲值机.exe - a variant of Win32/Regil trojan

2008-2-21 16:58:01 Kernel File  'F:\virus\btjsq.rar' was sent to ESET for analysis.
2008-2-21 16:57:34 Kernel File  'F:\virus\QQ2008gj.rar' was sent to ESET for analysis.
2008-2-21 16:55:16 Kernel File  'F:\virus\flqq.rar' was sent to ESET for analysis.
2008-2-21 16:53:42 Kernel File  'F:\virus\cgx.rar' was sent to ESET for analysis.

[ 本帖最后由无尽藏海于 2008-2-21 16:58 编辑 ]

显示全部楼层 · 发表于 2008-2-21 17:08:55

显示全部楼层 · 发表于 2008-2-21 17:14:09

信息 2008-02-21  17:14:01 您此次查毒共查出3个病毒以及危险代码
信息 2008-02-21  17:14:01 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件15个
信息 2008-02-21  17:14:01 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-02-21  17:14:01 C:\Users\挪威的冬天\Desktop\QQ2008gj.rar\QQ2008最新可用挂机外挂.exe Win32.Binder.YaBind.a.1469732 跳过，未处理
病毒 2008-02-21  17:14:01 C:\Users\挪威的冬天\Desktop\QQcz.rar\QQ冲值机.exe Win32.Binder.YaBind.a.1469732 跳过，未处理
病毒 2008-02-21  17:14:01 C:\Users\挪威的冬天\Desktop\btjsq.rar\BT加速器.exe Win32.Hack.Huigezi.cz 跳过，未处理

显示全部楼层 · 发表于 2008-2-21 17:53:42

BD 5个

扫描系统区域...
扫描选中目录和文件...
项目: BT??????.exe
检查档案: E:\pic\_PICtemp\btjsq.rar
状态: 发现病毒
病毒: GenPack:Backdoor.Graybird.CDA (BD 引擎)
项目: btjsq.rar
路径: E:\pic\_PICtemp
状态: 发现病毒
病毒: GenPack:Backdoor.Graybird.CDA (BD 引擎)
项目: ??????????\??????????.exe
检查档案: E:\pic\_PICtemp\cgx.rar
状态: 发现病毒
病毒: DeepScan:Generic.Graybird.13AEE178 (BD 引擎)
项目: cgx.rar
路径: E:\pic\_PICtemp
状态: 发现病毒
病毒: DeepScan:Generic.Graybird.13AEE178 (BD 引擎)
项目: flqq\QQ????????????????V3.0.exe (Embedded EXE 3o)
检查档案: E:\pic\_PICtemp\flqq.rar
状态: 发现病毒
病毒: Packer.RLPack.D (BD 引擎)
项目: flqq.rar
路径: E:\pic\_PICtemp
状态: 发现病毒
病毒: Packer.RLPack.D (BD 引擎)
项目: QQ2008????????????????.exe
检查档案: E:\pic\_PICtemp\QQ2008gj.rar
状态: 发现病毒
病毒: Trojan.Dropper.Agent.BDZ (BD 引擎)
项目: QQ2008gj.rar
路径: E:\pic\_PICtemp
状态: 发现病毒
病毒: Trojan.Dropper.Agent.BDZ (BD 引擎)
项目: QQ??????.exe
检查档案: E:\pic\_PICtemp\QQcz.rar
状态: 发现病毒
病毒: Trojan.Dropper.Agent.BDZ (BD 引擎)
项目: QQcz.rar
路径: E:\pic\_PICtemp
状态: 发现病毒
病毒: Trojan.Dropper.Agent.BDZ (BD 引擎)
病毒分析完成: 2/21/2008 17:51
5 文件被检查
5 感染文件发现
0 发现可疑文件

显示全部楼层 · 发表于 2008-2-21 20:40:21

[Scanning : C:\Test]

C:\Test\QQcz.rar<RAR>:QQ冲值机.exe <- Trojan.Dropper.Agent.Bdz : Cleaning -> No action
C:\Test\QQcz.rar<RAR>:QQ冲值机.exe<DLLRES>:file0.exe <- Trojan.Dropper.Delf.Anc : Cleaning -> No action

Scanned objects : 14

Infected objects : 2

显示全部楼层 · 发表于 2008-2-21 20:58:38

http://user.free2.77169.net/qq000/download/btjsq.rar

显示全部楼层 · 发表于 2008-2-21 21:03:39

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Dropper.Delf.bql

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.32.32

显示全部楼层 · 发表于 2008-2-21 22:09:43

The file '##########.exe' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Hupigon.awtu.3. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.02.173. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[已鉴定] 来几个

死链接！

8/2

回复 2楼 Graybird 的帖子