6个

qianwenxiang

挖自  http://202.102.135.97/aftcle/admin/

6
Starting the file scan:

Begin scan in 'D:\mdld.rar'
D:\mdld.rar
  [0] Archive type: RAR
  --> QQvip.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> QQ.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> vip.chm
      [1] Archive type: CHM
      --> /vip.exe
          [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.ezx Backdoor server programs
  --> QQasp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> vip.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.ezx Backdoor server programs
  --> chajian.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

wangjay1980

7
detected: virus Packed.Win32.Klone.af        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/QQvip.exe
detected: Trojan program Trojan-PSW.Win32.QQRob.hw        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/QQ.exe
detected: Trojan program Backdoor.Win32.Hupigon.ezx        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/vip.chm//vip.exe
detected: malware Exploit.HTML.CodeBaseExec        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/vip.chm//vip.htm
detected: virus Packed.Win32.Klone.af        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/QQasp.exe
detected: Trojan program Backdoor.Win32.Hupigon.ezx        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/vip.exe
detected: virus Packed.Win32.Klone.af        File: C:\Documents and Settings\Owner\×ÀÃæ\mdld.rar/chajian.exe

28654621

D:\download\mdld.rar>>QQ.exe        TrojanPSW.QQRob.hw.yhs        木马        还未处理
D:\download\mdld.rar>>vip.chm        Chm.Exefile.Container.E        病毒        还未处理
D:\download\mdld.rar>>QQasp.exe        Packed.Klone.af.qukw        可疑程序        还未处理
D:\download\mdld.rar>>vip.exe        Backdoor.Hupigon.ezx.slzx        后门        还未处理


就认识4个

tanlimo

ess扫描日志
病毒库版本: 2959 (20080319)
日期: 2008-3-19  时间: 20:09:11
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\ok\桌面\mdld.rar
D:\Documents and Settings\ok\桌面\mdld.rar > RAR > QQ.exe - Win32/TrojanDownloader.Agent.PD 特洛伊木马
D:\Documents and Settings\ok\桌面\mdld.rar > RAR > vip.chm > CHM > /vip.exe - 可能是 Win32/Obfuscated 特洛伊木马 的变种
D:\Documents and Settings\ok\桌面\mdld.rar > RAR > QQasp.exe - 可能是 Win32/Obfuscated 特洛伊木马 的变种
D:\Documents and Settings\ok\桌面\mdld.rar > RAR > vip.exe - 可能是 Win32/Obfuscated 特洛伊木马 的变种
D:\Documents and Settings\ok\桌面\mdld.rar > RAR > chajian.exe - Win32/Hupigon 特洛伊木马 的变种
已扫描的对象数: 24
发现的威胁数: 5
完成时间: 20:09:15  总扫描时间: 4 秒 (00:00:04)

wenfe

大蜘蛛6个全报
19-03-2008 20:26:30 [CL] C:\Documents and Settings\Administrator\My Documents\QQvip.exe - infected with Trojan.PWS.Qqrobber.135
19-03-2008 20:26:32 [CL] C:\Documents and Settings\Administrator\My Documents\QQvip.exe - deleted
19-03-2008 20:26:33 [CL] C:\Documents and Settings\Administrator\My Documents\QQ.exe - infected with Trojan.PWS.Qqrobber.135
19-03-2008 20:26:34 [CL] C:\Documents and Settings\Administrator\My Documents\QQ.exe - deleted
19-03-2008 20:26:36 [CL] C:\Documents and Settings\Administrator\My Documents\vip.chm\vip.exe - infected with BackDoor.Pigeon.3436
19-03-2008 20:26:36 [CL] C:\Documents and Settings\Administrator\My Documents\vip.chm - infected archive
19-03-2008 20:26:37 [CL] C:\Documents and Settings\Administrator\My Documents\vip.chm - deleted
19-03-2008 20:26:38 [CL] C:\Documents and Settings\Administrator\My Documents\QQasp.exe - infected with Trojan.PWS.Qqrobber.135
19-03-2008 20:26:39 [CL] C:\Documents and Settings\Administrator\My Documents\QQasp.exe - deleted
19-03-2008 20:26:41 [CL] C:\Documents and Settings\Administrator\My Documents\vip.exe - infected with BackDoor.Pigeon.3436
19-03-2008 20:26:42 [CL] C:\Documents and Settings\Administrator\My Documents\vip.exe - deleted
19-03-2008 20:26:45 [CL] C:\Documents and Settings\Administrator\My Documents\chajian.exe - infected with BackDoor.Pigeon.3962
19-03-2008 20:26:46 [CL] C:\Documents and Settings\Administrator\My Documents\chajian.exe - deleted

挪威的冬天

金山 2+1

信息        2008-03-19  20:51:16        您此次查毒隔离了1个文件                        
信息        2008-03-19  20:51:16        您此次查毒共查出1个病毒以及危险代码                        
信息        2008-03-19  20:51:16        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件15个                        
信息        2008-03-19  20:51:16        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                        
病毒        2008-03-19  20:51:16        D:\Desktop\mdld\vip.chm\vip.exe        Win32.Hack.Huigezi.356864        隔离成功        
信息        2008-03-19  20:50:46        您此次查毒清除了2个病毒                        
信息        2008-03-19  20:50:46        您此次查毒共查出3个病毒以及危险代码                        
信息        2008-03-19  20:50:46        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件18个                        
信息        2008-03-19  20:50:46        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                        
病毒        2008-03-19  20:50:46        D:\Desktop\mdld.rar\vip.exe        Win32.Hack.Huigezi.356864        清除成功        
病毒        2008-03-19  20:50:46        D:\Desktop\mdld.rar\QQ.exe        Win32.PSWTroj.QQRob.hw.98304        清除成功

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\mdld.rar<RAR>:QQvip.exe <- Trojan.Packed.Klone.Af : No action
C:\Documents and Settings\All Users\Documents\Test\mdld.rar<RAR>:QQ.exe <- Trojan.Psw.Qqrob.Gv : No action
C:\Documents and Settings\All Users\Documents\Test\mdld.rar<RAR>:vip.chm<CHM>:vip.exe <- Trojan.Hupigon.Ezx : No action
C:\Documents and Settings\All Users\Documents\Test\mdld.rar<RAR>:vip.exe <- Trojan.Hupigon.Ezx : No action
C:\Documents and Settings\All Users\Documents\Test\mdld.rar<RAR>:chajian.exe <- Trojan.Packed.Klone.Af : No action



Scanned objects : 20

Infected objects : 5

allinwonderi

[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->QQvip.exe->(Klone.AF)->(SimplePack)
[Found password stealer]         <W32/QQPass.SH@pws (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->QQ.exe
[Found Trojan]         <HTML/CodeBase.A (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->vip.chm->vip.htm
[Found backdoor]         <W32/Hupigon.LNI (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->vip.chm->vip.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->QQasp.exe->(Klone.AF)->(SimplePack)
[Found backdoor]         <W32/Hupigon.LNI (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->vip.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\mdld.rar->chajian.exe->(Klone.AF)->(SimplePack)


---------------------------------------------------------------------
Scan ended:        2008-3-19, 22:08:39
Duration:        0:00:03

Scan result:

Scanned files:                 6
Infected objects:         7
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.VmpPacker.a
病毒： Backdoor.Win32.Gpigeon.bg
病毒： Backdoor.Win32.Gpigeon.bu

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.22