样本7个

显示全部楼层 · 发表于 2007-4-7 21:06:48

我这边网速不稳定,麻烦装卡巴的把卡巴杀不掉的上报.

显示全部楼层 · 发表于 2007-4-7 21:09:20

BitDefender Antivirus Plus v10未解压扫描
Downloads[1].part01.rar=>123a.exe Infected: Generic.PWStealer.7F3BC13D
Downloads[1].part01.rar=>qqqx.exe Infected: Backdoor.Pigeon.KG
Downloads[1].part01.rar=>QQ精灵V3.1.exe Infected: Trojan.Dropper.Exebinder.D
Downloads[1].part01.rar=>QQ密码在线破解器2007.exe Infected: Trojan.Dropper.Exebinder.D
Downloads[1].part01.rar=>QQ性别修改器2007版.exe Infected: Trojan.Dropper.Exebinder.D
Downloads[1].part01.rar=>Server_Setup.exe Infected: Backdoor.Pigeon.KG

显示全部楼层 · 发表于 2007-4-7 21:13:41

原帖由 soul20010 于 2007-4-7 21:09 发表
BitDefender Antivirus Plus v10未解压扫描
Downloads[1].part01.rar=>123a.exe Infected: Generic.PWStealer.7F3BC13D
Downloads[1].part01.rar=>qqqx.exe Infected: Backdoor.Pigeon.KG
Downloads[1].part ...

不能不解压的，你只扫了一小部分

NOD32 miss 123a

显示全部楼层 · 发表于 2007-4-7 21:14:27

avast!报了5个

显示全部楼层 · 发表于 2007-4-7 21:14:44

mcafe

显示全部楼层 · 发表于 2007-4-7 21:16:53

Scan performed at: 2007-4-7 21:16:21
Scanning Log
NOD32 version 2172 (20070407) NT
Command line: C:\Documents and Settings\EQ2\桌面\Downloads
Operating memory - is OK

Date: 7.4.2007 Time: 21:16:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Downloads\
C:\Documents and Settings\EQ2\桌面\Downloads\cs.exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\EQ2\桌面\Downloads\qqqx.exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\EQ2\桌面\Downloads\QQ密码在线破解器2007.exe - Win32/TrojanDropper.ExeBinder.D trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads\QQ性别修改器2007版.exe - Win32/TrojanDropper.ExeBinder.D trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads\QQ精灵V3.1.exe - Win32/TrojanDropper.ExeBinder.D trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads\Server_Setup.exe - Win32/Hupigon trojan - quarantined - unable to clean - deleted
Number of scanned files: 7
Number of threats found: 6
Number of files cleaned: 6
Time of completion: 21:16:28 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-4-7 21:18:23

金山杀5个,有谁贴下瑞星的,比较一下

显示全部楼层 · 发表于 2007-4-7 21:23:16

C:\Documents and Settings\cn\桌面\Downloads\cs.exe - Win32/Hupigon 木马变种

[ 本帖最后由 cx8892345 于 2007-4-7 21:25 编辑 ]

显示全部楼层 · 发表于 2007-4-8 02:44:31

只有antivir可以全灭

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Downloads'
C:\Documents and Settings\morgan\My Documents\Downloads\
  123a.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.27568.1
   [INFO]    The file was deleted!
  cs.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  qqqx.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.bm.1 Backdoor server programs
   [INFO]    The file was deleted!
  QQ密码在线破解器2007.exe
   [DETECTION] Is the Trojan horse TR/Drop.ExeBin.d.13
   [INFO]    The file was deleted!
  QQ性别修改器2007版.exe
   [DETECTION] Is the Trojan horse TR/Drop.ExeBin.d.13
   [INFO]    The file was deleted!
  QQ精灵V3.1.exe
   [DETECTION] Is the Trojan horse TR/Drop.ExeBin.d.13
   [INFO]    The file was deleted!
  Server_Setup.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.PV.5 Backdoor server programs
   [INFO]    The file was deleted!

End of the scan: 2007年4月7日  11:44
Used time: 00:08 min

The scan has been done completely.

   1 Scanning directories
   7 Files were scanned
   7 viruses and/or unwanted programs were found
   7 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-8 08:01:50

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月8日8时1分40秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\123a.exe 发现未知可疑文件:Win32.NkHack.Preloc.A 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\qqqx.exe 发现可疑文件:T.2007-H 灰鸽子木马操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\QQ精灵V3.1.exe 发现可疑文件:T.2007-H 灰鸽子木马操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\QQ密码在线破解器2007.exe 发现可疑文件:T.2007-H 灰鸽子木马操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\QQ性别修改器2007版.exe 发现可疑文件:T.2007-H 灰鸽子木马操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\Server_Setup.exe 发现可疑文件:T.2007-H 灰鸽子木马操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\Downloads[1]\123a.exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月8日8时1分41秒收起线程…100% 查杀完毕！
扫描文件：7查杀病毒：6

[病毒样本] 样本7个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

AVK不灵光了，但是NOD弥补了

本帖子中包含更多资源