[47101D]不远处毒网挖的

显示全部楼层 · 发表于 2007-8-14 12:55:08

为PC护航风暴微塔
_____________________________________________

         风暴微塔反病毒
                        [内测版]
               http://www.v0day.com/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\virus\3.zip]
                  …………引擎[2]发现病毒:Win32.NkHack.PeM.A
OK  扫描完毕！

显示全部楼层 · 发表于 2007-8-14 12:57:50

nod32 pass

显示全部楼层 · 发表于 2007-8-14 13:00:21

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\FANFNA.BAT
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-8-14 13:00:36

费尔pass，红伞
[DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
[INFO] The file was deleted!

显示全部楼层 · 发表于 2007-8-14 13:03:03

vexira pass

显示全部楼层 · 发表于 2007-8-14 13:39:32

http://bbs.kafan.cn/attachment.php?aid=113446\3.exe [L] Win32:Hupigon-OH [Trj] (0)
File was successfully moved to chest...

显示全部楼层 · 发表于 2007-8-14 14:47:28

红伞报鸽子:Start of the scan: 2007年8月14日  14:46

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\3.zip
  [0] Archive type: ZIP
  --> 3.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
   [INFO]    The file was deleted!

End of the scan: 2007年8月14日  14:46
Used time: 00:18 min

The scan has been done completely.

   1 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-14 14:55:24

vba32 miss

显示全部楼层 · 发表于 2007-8-14 15:05:53

病毒: Packed.Win32.PolyCrypt.b
文件: 3[1].zip
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I0GU558Q
进程: Maxthon.exe

[病毒样本] [47101D]不远处毒网挖的

本帖子中包含更多资源