來几个（14日）

流清泉

14日下午的
http://j.99081.com/zpliuxing168/smq.rar
http://hackwjq.im138.com/DJ.exe
http://tao72172.81free.com/ala.exe
http://eynh888.128.tofor.com/hack/zp.exe
http://www.ybsky.com/hxwg.rar

[ 本帖最后由 流清泉 于 2008-3-14 19:35 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQPass.GEN
病毒： Trojan.PSW.Win32.QQPass.toa
病毒： Trojan.PSW.Win32.QQPass.yyb

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.35.41

wangjay1980

detected: Trojan program Trojan-PSW.Win32.QQPass.amf        File: E:\ÏÂÔØ»ùµØ\zp.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.xl        File: E:\ÏÂÔØ»ùµØ\ala.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Delf.fdy        File: E:\ÏÂÔØ»ùµØ\DJ.exe//UPack//PE_Patch.MaskPE

TO KL

qianwenxiang

avast
Win32:Delf-HOS [Trj]
Win32:QQPass-OQ [Trj]
Win32:Nilage-AI [Trj],Win32:Trojan-gen {Other}
Win32:QQPass-PF [Trj],Win32:Trojan-gen {Other}
hxwg.rar : pass

mofunzone

全灭

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\zp.exe'
C:\TDDOWNLOAD\
  zp.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/Spy.QQpass
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\ala.exe'
C:\TDDOWNLOAD\
  ala.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.QQpass.XL.4
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\DJ.exe'
C:\TDDOWNLOAD\
  DJ.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\hxwg.rar'
C:\TDDOWNLOAD\
  hxwg.rar
    [0] Archive type: RAR
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\city.dat
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\comm.ini
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\custom.dat
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\door.ini
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\doorlink.ini
    --> ﾻￃￏ￫ￍ￢ﾹￒ\data\fancy.dll
        [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\smq.rar'
C:\TDDOWNLOAD\
  smq.rar
    [0] Archive type: RAR
发表帖子[完成后可按    --> ￖﾻￄￜ￉ﾨￃ￨ￆ?.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The file was deleted!


End of the scan: 2008年3月14日  10:47
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      3 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      2 Archives were scanned
      1 Warnings
      5 Notes