e566c0，晚餐鸽子！

显示全部楼层 · 发表于 2007-9-3 17:53:09

已检测到: 木马程序 Backdoor.Win32.Hupigon.jki URL: http://bbs.kafan.cn/attachment.php?aid=122856//set up.exe

显示全部楼层 · 发表于 2007-9-3 18:03:30

吃了

显示全部楼层 · 发表于 2007-9-3 18:07:05

--> set  up.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.jki Backdoor server programs
   [INFO]    A backup was created as '474fdd1a.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 18:07:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\set'
C:\Documents and Settings\Administrator\My Documents\
  set
[0] Archive type: RAR
--> set  up.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.jki Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 18:16:17

木马名称:Backdoor.Win32.Huigezi.ydi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.ECC8917B72F64E7\桌面\SET UP\SET UP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-3 18:58:57

2007-9-3 18:58:21 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\set up.exe New Malware.an (Trojan)

显示全部楼层 · 发表于 2007-9-3 19:02:11

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2684
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\set up.exe

C:\Documents and Settings\uhthn\Desktop\set up.exe - Infected with PDB-42 Malware program (Paranoia Database) - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-3 19:03:36

现在样本区红伞不报的太少了啊

显示全部楼层 · 发表于 2007-9-3 19:19:59

你要吗
我可以做一堆
但我发的基本都是网上挂的有流传性的，发实验室样本没有意义
真实样本红伞查杀率本来就不错

[病毒样本] e566c0，晚餐鸽子！

本帖子中包含更多资源

回复 9楼 tracydk 的帖子