两个 [MD5: B9F4B9 853E28]

显示全部楼层 · 发表于 2007-7-31 16:05:57

发完这个去睡了，

大家继续

显示全部楼层 · 发表于 2007-7-31 16:07:49

Virus: Backdoor.Win32.Hupigon.blm

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-7-31 16:11:28

Scan performed at: 2007-7-31 16:10:21
Scanning Log
NOD32 version 2429 (20070730) NT
Command line: C:\Documents and Settings\EQ2\桌面\heart
Operating memory - is OK

Date: 31.7.2007 Time: 16:10:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\heart\
C:\Documents and Settings\EQ2\桌面\heart\heart\1.exe.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\heart\heart\2.exe.exe - a variant of Win32/Hupigon trojan
Number of scanned files: 2
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 16:10:57 Total scanning time: 30 sec (00:00:30)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-7-31 16:12:59

卡巴发现一个已检测到: 木马程序 Backdoor.Win32.Hupigon.blm URL: http://bbs.kafan.cn/attachment.php?aid=107384//heart/2.exe.exe

显示全部楼层 · 发表于 2007-7-31 16:13:18

arcavir

OK c:\malware\heart.rar
VIR: Variant:Trojan.Agent.Zl c:\malware\heart.rar<RAR>:1.exe.exe
ACTION OK LEAVE
OK c:\malware\heart.rar<RAR>:1.exe.exe<DLLRES>:res0.exe
OK c:\malware\heart.rar<RAR>:1.exe.exe<DLLRES>:res1.exe
OK c:\malware\heart.rar<RAR>:1.exe.exe<DLLRES>:res2.exe
OK c:\malware\heart.rar<RAR>:2.exe.exe

显示全部楼层 · 发表于 2007-7-31 16:45:59

程序:
G:\样本\样本\HEART\1.EXE.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\VIDEOCAP12.DLL
2) C:\PROGRAM FILES\COMMON FILES\VIDEOCAPPCI12.SYS
3) C:\PROGRAM FILES\COMMON FILES\VIDEOCAPUSB12.SYS
4) C:\PROGRAM FILES\COMMON FILES\VIDEOCAP12.EXE
是否删除木马程序及其衍生物?

程序:
G:\样本\样本\HEART\2.EXE.EXE
木马程序生成以下文件:
1) C:\WINDOWS\HACKER.COM.CN.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-31 16:46:57

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\HEART\1.EXE.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\VIDEOCAP12.DLL
2) C:\PROGRAM FILES\COMMON FILES\VIDEOCAPPCI12.SYS
3) C:\PROGRAM FILES\COMMON FILES\VIDEOCAPUSB12.SYS
4) C:\PROGRAM FILES\COMMON FILES\VIDEOCAP12.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\HEART\2.EXE.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\HACKER.COM.CN.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-7-31 20:06:05

显示全部楼层 · 发表于 2007-7-31 20:07:54

显示全部楼层 · 发表于 2007-7-31 20:58:01

[病毒样本] 两个 [MD5: B9F4B9 853E28]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源