3个毒

troika

呵呵

beat2

实时监控一个
Found a virus or unwanted program 'TR/PSW.QQPass.WD.1' [trojan]
in file 'D:\2 area\13\qq20071.exe'.

右键扫描一个
Found a virus or unwanted program 'BDS/Hupigon.Gen' [backdoor]
in file 'D:\2 area\Downloads\TQ.exe'.

漏一个TQ_Pro.exe，不过它是死的

[ 本帖最后由 beat2 于 2007-5-18 11:37 编辑 ]

bridgewr

TQ_Pro.exe运行就退出，没有其他动作；其他2个微点搞定

bridgewr

漏了张图

欠妳緈諨

AVAST一个，金山一个

风野胤

Scanning Log
NOD32 version 2275 (20070517) NT
Command line: C:\Documents and Settings\fengyeyin\桌面\ ?
?新建文件夹
Checking CRC of NOD32.EXE: Status OK
d:\Program Files\Eset\nod32.exe - is OK
Scanning memory: Not performed (option disabled)
Scanning MBR and boot sectors: Not performed (option  ?
?disabled)
Date: 18.5.2007  Time: 12:13:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\fengyeyin\桌面\新建文件夹\
C:\Documents and Settings\fengyeyin\桌面\新建文件夹\ ?
?qq20071.exe - Win32/TrojanDropper.Delf.ON trojan
C:\Documents and Settings\fengyeyin\桌面\新建文件夹\TQ. ?
?exe ?RAR ?TQuery v2.0_cctv1234.exe - is OK
C:\Documents and Settings\fengyeyin\桌面\新建文件夹\TQ. ?
?exe ?RAR ?2.vmp.exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\fengyeyin\桌面\新建文件夹\ ?
?TQ_Pro.exe - is OK
Number of scanned files: 4
Number of threats found: 2
Time of completion: 12:13:33 Total scanning time: 8 sec  ?
?(00:00:08)

miller239

Check system areas...
Check selected directories and files...
Object: qq20071.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Virus detected
        Virus: Trojan-Dropper.Win32.Delf.qq (KAV engine), Trojan.Dropper.Delf.QQ (BD-Engine)
Object: (RAR Sfx o) TQuery v2.0_cctv1234.exe
        In archive: C:\Documents and Settings\Administrator\桌面\Downloads\TQ.exe
        Status: Virus detected
        Virus: Backdoor.Pcclient.GV (BD-Engine)
Object: TQ.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Virus detected
        Virus: Backdoor.Pcclient.GV (BD-Engine)
Analysis complete: 2007-5-18 12:23
    3 files checked
    2 infected files detected
    0 suspected files detected

zxy900906

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Downloads'
C:\Documents and Settings\Administrator\桌面\Downloads\qq20071.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
      [INFO]      A backup was created as '467f30c6.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Downloads\TQ.exe
  [0] Archive type: RAR SFX (self extracting)
  --> TQuery v2.0_cctv1234.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Pcclient.GV.168 Backdoor server programs
  --> 2.vmp.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '467b30a7.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!