运行一个自解压文件，出了这个隐藏病毒（自动运行），卡巴7飘过[C14E17]

显示全部楼层 · 发表于 2007-8-31 02:13:11

哪位朋友帮忙分析一下它的动作啊，怕中毒啊

PS:卡巴7的主动防御拦截了它注入IE的动作

下面是Jotti上的扫描结果

[ 本帖最后由 promised 于 2007-8-31 10:45 编辑 ]

显示全部楼层 · 发表于 2007-8-31 02:34:28

Hupigon

显示全部楼层 · 发表于 2007-8-31 03:25:37

声音文件的图标
但扩展名是exe
不用分析就知道肯定有问题的啦
诱导人点击

显示全部楼层 · 发表于 2007-8-31 06:04:03

程序:
D:\病毒库\NET\NET.EXE
是否删除木马程序及其衍生物?

未知间谍软件
NET.EXE

显示全部楼层 · 发表于 2007-8-31 08:00:52

Ikarus报的也是鸽子:
MalwareScope.Backdoor.Hupigon.17

显示全部楼层 · 发表于 2007-8-31 08:23:19

鸽子啊

显示全部楼层 · 发表于 2007-8-31 08:29:55

毒霸可以查杀的

显示全部楼层 · 发表于 2007-8-31 08:58:53

毒霸是灰鸽子克星

显示全部楼层 · 发表于 2007-8-31 09:59:41

又见Packer.Mian007

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Packer.Mian007

显示全部楼层 · 发表于 2007-8-31 10:26:11

D:\我的文档\download\net.rar
  [0] Archive type: RAR
  --> net.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [WARNING] The file was ignored!

End of the scan: 2007年8月31日  10:25
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes
   0 Hidden objects were found

[病毒样本] 运行一个自解压文件，出了这个隐藏病毒（自动运行），卡巴7飘过[C14E17]

本帖子中包含更多资源

本帖子中包含更多资源