http://up.bizmd.cn/software/pluglist.xml

显示全部楼层 · 发表于 2008-8-7 22:06:59

内容:

http://up.bizmd.cn/software/d06.exe,E,Y,N,W,d06.exe,,107
http://up.bizmd.cn/software/003.exe,E,Y,N,W,003.exe,,36
http://up.bizmd.cn/software/ThunderBHONew.dll,D,Y,N,W,ThunderBHONew.dll,,10(可下)
http://up.bizmd.cn/software/MsSvcHost32.exe,E,Y,N,W,Unistall64.exe,,3

显示全部楼层 · 发表于 2008-8-7 22:07:57

扫描统计:
扫描时间: 1秒
扫描选项:
扫描目标: F:\VIRUS\ThunderBHONew.rar
计数:
扫描的项目总数: 2
- 文件和目录: 2
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 1
已解决的项目总数: 0
需要注意的项目总数: 1

已解决的风险:

未解决的风险:
Downloader
病毒 ID: 26637
类型: 已压缩
风险: 高 (高隐蔽性，高清除可能，高性能，高隐私)
类别: 病毒
状态: 删除失败
-----------
1 文件
[thunderbhonew.dll] 位于[f:\virus\thunderbhonew.rar] - 已感染

显示全部楼层 · 发表于 2008-8-7 22:22:59

nis kill

显示全部楼层 · 发表于 2008-8-7 22:23:13

显示全部楼层 · 发表于 2008-8-7 22:57:11

Requested URL: http://bbs.kafan.cn/attachment.p ... c5&t=1218121012
Information: Is the TR/Dldr.QQHelper.bdl Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.19, VDF 7.0.5.228

显示全部楼层 · 发表于 2008-8-7 22:58:05

Scan Log
Version of virus signature database: 3336 (20080807)
Date: 2008-8-7 Time: 22:58:25
Scanned disks, folders and files: G:\v\ThunderBHONew.rar
G:\v\ThunderBHONew.rar » RAR » ThunderBHONew.dll - a variant of Win32/BHO.NDH trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 22:58:25 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2008-8-7 23:21:04

风险程序 2008-08-07 23:20:12 C:\Documents and Settings\Administrator\桌面\ThunderBHONew.rar\ThunderBHONew.dll Win32.Adware.QQHelper.502272 跳过，未处理

显示全部楼层 · 发表于 2008-8-8 11:38:01

McAfee Downloader-BGJ

显示全部楼层 · 发表于 2008-8-8 15:48:55

2008/8/8 15:48:29 已清除木马程序 Trojan-Downloader.Win32.QQHelper.bdl G:\Temp\Virus\ThunderBHONew.rar
2008/8/8 15:48:29 已清除木马程序 Trojan-Downloader.Win32.QQHelper.bdl G:\Temp\Virus\ThunderBHONew.rar/ThunderBHONew.dll//PE_Patch.UPX//UPX

[病毒样本] http://up.bizmd.cn/software/pluglist.xml