3 样本~~~~

tonger2003

3

The EQs

Scan performed at: 2007-4-5 1:01:16
Scanning Log
NOD32 version 2168 (20070404) NT
Command line: C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD
Operating memory - is OK

Date: 5.4.2007  Time: 01:01:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\image2.gif - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\image8.gif - Win32/Qhost trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\TDDOWNLOAD\z2.jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 3
Number of threats found: 3
Number of files cleaned: 3
Time of completion: 01:01:20 Total scanning time: 1 sec (00:00:01)

lanvin

飞塔都灭了

蓝色牛仔裤

漏一个..
TDDOWNLOAD.rar\z2.jpg;C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar;Exploit.ANIFile;;
TDDOWNLOAD.rar\image2.gif;C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar;Trojan.PWS.Soul;;
TDDOWNLOAD.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

dericyeoh

kis全杀
已删除: 恶意程序 Exploit.Win32.IMG-ANI.k        文件: C:\Documents and Settings\Deric Yeoh\桌面\TDDOWNLOAD.rar/z2.jpg
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.kw        文件: C:\Documents and Settings\Deric Yeoh\桌面\TDDOWNLOAD.rar/image2.gif//UPX
已删除: 木马程序 Trojan.Win32.Qhost.kn        文件: C:\Documents and Settings\Deric Yeoh\桌面\TDDOWNLOAD\image8.exe        DERICYEOH\Deric Yeoh        localhost

KAV-Longhorn

红伞漏一个，上报去了

mofunzone

nod会把这种东西报为qhost
127.0.0.1       localhost
127.0.0.1       mmm.caifu18.net
127.0.0.1      www.18dmm.com
127.0.0.1      d.qbbd.com
127.0.0.1      www.5117music.com
127.0.0.1      www.union123.com
127.0.0.1      www.wu7x.cn
127.0.0.1      www.54699.com
127.0.0.1      60.169.0.66
127.0.0.1      60.169.1.29
127.0.0.1      www.97725.com
127.0.0.1      down.97725.com
127.0.0.1      ip.315hack.com
127.0.0.1      ip.54liumang.com
127.0.0.1      www.41ip.com
127.0.0.1      xulao.com
127.0.0.1      www.heixiou.com
127.0.0.1      www.9cyy.com
127.0.0.1      www.hunll.com
127.0.0.1      www.down.hunll.com
127.0.0.1      do.77276.com
127.0.0.1      www.baidulink.com
127.0.0.1      adnx.yygou.cn
127.0.0.1      222.73.220.45
127.0.0.1      www.f5game.com
127.0.0.1      www.guazhan.cn
127.0.0.1      wm,103715.com
127.0.0.1      www.my6688.cn
127.0.0.1      i.96981.com
127.0.0.1      d.77276.com
127.0.0.1      www1.cw988.cn
127.0.0.1      cool.47555.com
127.0.0.1      www.asdwc.com
127.0.0.1      55880.cn
127.0.0.1      61.152.169.234
127.0.0.1      cc.wzxqy.com
127.0.0.1      www.54699.com

[ 本帖最后由 mofunzone 于 2007-4-4 14:22 编辑 ]

1p1

原帖由 mofunzone 于 2007-4-5 06:20 发表
nod会把这种东西报为qhost
127.0.0.1       localhost
127.0.0.1       mmm.caifu18.net
127.0.0.1      www.18dmm.com
127.0.0.1  
...

那应该怎么报

gggh

杀了

harry_chang2003

PCC 2007殺了兩隻