毒3个

troika

呵呵

foxhound

AVG Anti-Spyware 7.5只报了个Backdoor.Bifrose.adr

rasis

qqpojiedaquan.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen

QQ外挂.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.dfl Backdoor server programs

QQ性别修改.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.cwk.2

[ 本帖最后由 rasis 于 2007-6-3 11:51 编辑 ]

wangjay1980

detected: Trojan program Backdoor.Win32.Bifrose.adr        File: E:\Ñù±¾\qqpojiedaquan.exe//NSPack
detected: Trojan program Backdoor.Win32.Hupigon.efa        File: E:\Ñù±¾\QQÍâ¹Ò.exe
detected: Trojan program Trojan-Downloader.Win32.Small.cwk        File: E:\Ñù±¾\QQÐÔ±ðÐÞ¸Ä.exe

欠妳緈諨

AVAST全灭

欠妳緈諨

金山也是全灭

Redevil

第一个
创建文件        C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.sys
创建文件        C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.dll
C:\Documents and Settings\Redevil\Local Settings\Temp\jhq.exe (PID: 1232)注入 C:\windows\Explorer.EXE (PID: 2020)。这种行为是某些恶意软件的特征。

nod前两个已知，第三个启发

蓝色牛仔裤

read error ？！！

[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads
C:\Documents and Settings\Administrator\桌面\Downloads\qqpojiedaquan.exe infected with BackDoor.Bifrost.78
C:\Documents and Settings\Administrator\桌面\Downloads\QQ外挂.e - read error
C:\Documents and Settings\Administrator\桌面\Downloads\QQ性别~1.E - read error

蓝色牛仔裤

大蜘蛛的bug 还真多啊。。
隔了一个文件夹就read error 。。


[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads\qqpojiedaquan.exe
C:\Documents and Settings\Administrator\桌面\Downloads\qqpojiedaquan.exe infected with BackDoor.Bifrost.78

[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads\QQ外挂.exe
>>C:\Documents and Settings\Administrator\桌面\Downloads\QQ外挂.exe infected with BackDoor.Pigeon.1650

[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads\QQ性别修改.exe
C:\Documents and Settings\Administrator\桌面\Downloads\QQ性别修改.exe infected with Trojan.DownLoader.10117