VIP和一鸽子[MD5: 7BE9AA 8779F8]

zane_xzz

7BE9AA 8779F8

红心王子

已删除: 病毒 Virus.Win32.AutoRun.fk        文件: C:\Documents and Settings\Administrator\桌面\桌面.rar\vip.exe
已删除: 木马程序 Backdoor.Win32.Hupigon.jnf        文件: C:\Documents and Settings\Administrator\桌面\桌面.rar\siyua.exe/SVKP

ssy275

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\桌面.rar'
F:\病毒样本\桌面.rar
  [0] Archive type: RAR
  --> vip.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> siyua.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

chenpatrick

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=123464 is infected with Virus.Win32.AutoRun.fk virus

capsshift

楼上太快，红伞报了。
Begin scan in 'C:\BOOT\桌面.rar'
C:\BOOT\桌面.rar
  [0] Archive type: RAR
  --> vip.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> siyua.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was moved to '470ca444.qua'!

微点卫士

微点：
程序:
C:\WINDOWS.0\SYSTEM32\CRSSS.EXE
由
C:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\CRSSS.EXE
2) C:\GHO.EXE
3) C:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
C:\GHO.EXE

是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIP.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SIYUA.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\QQ
是否删除木马程序及其衍生物?

[ 本帖最后由 微点卫士 于 2007-9-5 17:14 编辑 ]

欠妳緈諨

残缺的唯美

咖啡继续飘