毒两个,其中一个是鸽子

显示全部楼层 · 发表于 2007-4-9 03:06:29

呵呵

显示全部楼层 · 发表于 2007-4-9 03:11:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\shuaQB.rar'
C:\Documents and Settings\morgan\My Documents\
  shuaQB.rar
[0] Archive type: RAR
--> shuaQB.exe
      [DETECTION] Contains signature of the backdoor control software BDC/SkSocket.108.
      [WARNING] Infected files in archives cannot be repaired!
--> ¸ë×Ó.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-9 03:14:08

Scan performed at: 2007-4-9 3:10:25
Scanning Log
NOD32 version 2173 (20070407) NT
Command line: C:\Documents and Settings\EQ2\桌面\shuaQB
Operating memory - is OK

Date: 9.4.2007 Time: 03:10:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\shuaQB\
C:\Documents and Settings\EQ2\桌面\shuaQB\shuaQB.exe - probably a variant of Win32/SkSocket trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:10:40 Total scanning time: 11 sec (00:00:11)

显示全部楼层 · 发表于 2007-4-10 02:57:27

[EXECUTE]                            2007.04.10 02:54:48
[ALLOW]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[FROM]                               C:\windows\Explorer.EXE
                                    Command Line:C:\windows\Explorer.EXE

[DELETE FILE]                         2007.04.10 02:55:11
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\WINDOWS\
                                    File: cmuninst.dat

[CREATE FILE]                         2007.04.10 02:55:31
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\
                                    File: Hacker.com.cn.exe

[CREATE FILE]                         2007.04.10 02:55:42
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\
                                    File: Hacker.com.cn.exe

[CREATE FILE]                         2007.04.10 02:55:43
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\
                                    File: Hacker.com.cn.exe

[INSTALL SERVICE/DRIVER/ROOTKIT]       2007.04.10 02:55:48
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            C:\windows\Hacker.com.cn.exe

[ 本帖最后由 jlennon 于 2007-4-10 02:58 编辑 ]

显示全部楼层 · 发表于 2007-4-10 22:29:15

KIS已删除: 木马程序 Backdoor.Win32.SkSocket.106 文件: D:\Downloads\shuaQB.rar\shuaQB.exe
已删除: 木马程序 Backdoor.Win32.Hupigon.gs 文件: D:\Downloads\shuaQB.rar\鸽子.exe

显示全部楼层 · 发表于 2007-4-10 22:50:19

蜘蛛只杀了鸽子...

shuaQB.rar\鸽子.exe;C:\Documents and Settings\Administrator\桌面\shuaQB.rar;BackDoor.Pigeon.36;;
shuaQB.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-11 01:24:50

微点也只杀了鸽子啊

显示全部楼层 · 发表于 2007-4-11 20:33:18

Start scanning boot sectors:
Boot sector 'C:\'
   [NOTE]    No virus was found!

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\shuaQB.rar'
C:\Documents and Settings\Administrator\桌面\shuaQB.rar
  [0] Archive type: RAR
  --> shuaQB.exe
   [DETECTION] Contains signature of the backdoor control software BDC/SkSocket.108.
  --> ¸ë×Ó.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [INFO]    A backup was created as '4691d5d7.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年4月11日  20:32
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   3 Files were scanned
   2 viruses and/or unwanted programs were found
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-11 22:56:39

驱逐舰报一个

显示全部楼层 · 发表于 2007-4-11 23:38:58

信息 2007-04-11 23:38:06 您此次查毒清除了2个病毒
信息 2007-04-11 23:38:06 您此次查毒共查出2个病毒以及危险代码
信息 2007-04-11 23:38:06 您此次查毒共查了内存模块244个，磁盘引导扇区2个，文件9个
信息 2007-04-11 23:38:06 金山毒霸主程序查毒过程结束，查毒方式：全面杀毒
病毒 2007-04-11 23:38:06 C:\Documents and Settings\胡旭\桌面\shuaQB.rar\鸽子.exe Win32.Hack.Huigezi.cz 清除成功
病毒 2007-04-11 23:38:06 C:\Documents and Settings\胡旭\桌面\shuaQB.rar\shuaQB.exe Win32.Troj.SkSocket.49152 清除成功
信息 2007-04-11 23:37:39 金山毒霸主程序启动查毒过程，查毒方式：全面杀毒
信息 2007-04-11 23:36:46 您此次查毒共查出0个病毒以及危险代码
信息 2007-04-11 23:36:46 您此次查毒共查了内存模块245个，磁盘引导扇区2个，文件7个

[病毒样本] 毒两个,其中一个是鸽子

本帖子中包含更多资源

nod32杀鸽子还是不行

本帖子中包含更多资源

本帖子中包含更多资源