红伞一个不报

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\aa'
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_119.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.1 Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_355.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.ans
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_359.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AV
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_389.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.2 Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_398.exe
      [DETECTION] Is the Trojan horse TR/Small.agt
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\aa\样本\!@#$_595.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.VJ
      [INFO]      The file was deleted!


End of the scan: 星期一 2008年2月25日  05:36
Used time: 00:09 min

The scan has been done completely.

      2 Scanning directories
     50 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     44 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

capsshift

看来升级后的红伞，能查出几个了。

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Mnless.zp
病毒： Trojan.DL.Win32.Mnless.yyk

用户来源：互联网

软件版本：20.32.62

wangjay1980

Hello,

!@#$_112.exe_, !@#$_114.inf, !@#$_208.htm_, !@#$_216.dll, !@#$_219.ini, !@#$_230.exe_, !@#$_291.exe_, !@#$_314.exe_, !@#$_34.exe_, !@#$_367.ini, !@#$_410.exe_, !@#$_412.exe_, !@#$_478.exe_, !@#$_48.exe_, !@#$_481.htm_, !@#$_50.exe_, !@#$_536.exe_, !@#$_589.exe_, !@#$_60.exe_, !@#$_620.exe_, !@#$_64.exe_, !@#$_645.html_, !@#$_697.exe_, !@#$_714.ini, !@#$_729.exe_, !@#$_73.exe_, !@#$_77.exe_, !@#$_78.exe_, !@#$_87.exe_, !@#$_88.exe_, !@#$_90.exe_, !@#$_95.exe_, !@#$_98.exe_, Ie2k.dat, ust.dll

No malicious code were found in these files.


These files are already detected. Please update your antivirus bases.

!@#$_332.exe_, !@#$_375.exe_, !@#$_575.exe_

These files are corrupted.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 41.zip

28654621

D:\download\aa.part1.rar>>样本\!@#$_119.exe        Backdoor.PcClient.bam.mjqp        后门        还未处理
D:\download\aa.part1.rar>>样本\!@#$_291.exe        Hacktool.VB.y.ekjp        黑客工具        还未处理
D:\download\aa.part1.rar>>样本\!@#$_332.exe        TrojanDownloader.p.qqwz        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_355.exe        TrojanDownloader.Mnless.zp.fhfa        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_359.exe        TrojanPSW.QQGame.av.ylud        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_375.exe        TrojanPSW.OnLineGames.rxt.pgyu        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_386.exe        TrojanDownloader.Mnless.yyk.dell        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_389.exe        Backdoor.PcClient.bam.mjqp        后门        还未处理
D:\download\aa.part1.rar>>样本\!@#$_398.exe        Trojan.Small.agt.npsh        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_46.exe        TrojanDownloader.JS.Agent.bca.pywf        木马        还未处理
D:\download\aa.part1.rar>>样本\!@#$_572.exe        Hacktool.VB.y.ekjp        黑客工具        还未处理
D:\download\aa.part1.rar>>样本\!@#$_575.exe        W32.Viking.k        病毒        还未处理
D:\download\aa.part1.rar>>样本\!@#$_595.exe        Adware.BHO.vj.jhhi        广告程序        还未处理
13个

su-tt

Begin scan in 'C:\Documents and Settings\Administrator\桌面\aa[1].part1.rar'
C:\Documents and Settings\Administrator\桌面\aa[1].part1.rar
  [0] Archive type: RAR
  --> Ñù±¾\!@#$_119.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.1 Backdoor server programs
  --> Ñù±¾\!@#$_355.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.ans
  --> Ñù±¾\!@#$_359.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AV
  --> Ñù±¾\!@#$_389.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bhw.2 Backdoor server programs
  --> Ñù±¾\!@#$_398.exe
      [DETECTION] Is the Trojan horse TR/Small.agt
  --> Ñù±¾\!@#$_595.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.VJ
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\aa[1].part2.rar'


End of the scan: 2008年2月25日  10:35
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     95 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     89 Files not concerned
      4 Archives were scanned
      0 Warnings
      0 Notes