G_Server2007.exe [md5:500a54]

显示全部楼层 · 发表于 2007-9-10 11:30:28

nod32已知的鸽子卡巴不知道，这个世界混乱了，疯狂了。。

File:	G_Server2007.exe
Status:	INFECTED/MALWARE
MD5:	500a54769bbd3857f9db1065cb10234e
Packers detected:	PE_PATCH
Bit9 reports:	File not found

Scanner results
Scan taken on 10 Sep 2007 03:25:17 (GMT)
A-Squared	Found nothing
AntiVir	Found BDS/GreyBird.346624
ArcaVir	Found nothing
Avast	Found Win32:QQRob-AS
AVG Antivirus	Found nothing
BitDefender	Found GenPack:Backdoor.GrayBird.KJ
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found Win32/Hupigon.EQE
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found MalwareScope.Backdoor.Hupigon.1

显示全部楼层 · 发表于 2007-9-10 11:33:16

显示全部楼层 · 发表于 2007-9-10 11:38:41

Scan performed at: 2007-9-10 11:38:07
Scanning Log
NOD32 version 2517 (20070910) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\G_Server2007.exe

Date: 10.9.2007 Time: 11:38:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\G_Server2007.exe
D:\Documents and Settings\EKINCHENG\桌面\G_Server2007.exe ?RAR ?G_Server2007.exe - Win32/Hupigon.EQE trojan - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 11:38:10 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-9-10 14:03:48

F:\9.10\G_Server2007.rar >>RAR >>G_Server2007.exe - Win32/Hupigon.EQE 木马

显示全部楼层 · 发表于 2007-9-10 15:44:02

2007-09-10 15:43:09 创建文件    操作:阻止
进程路径:D:\病毒库\G_Server2007\G_Server2007.exe
文件路径:C:\WINDOWS\G_Server2007.exe
触发规则:所有程序规则->文件规则->%systemdrive%\*.exe

2007-09-10 15:43:10 安装服务或者驱动    操作:阻止
进程路径:C:\WINDOWS\system32\services.exe
文件路径:C:\WINDOWS\G_Server2007.exe
触发规则:所有程序规则->*

2007-09-10 15:43:11 创建文件    操作:阻止
进程路径:D:\病毒库\G_Server2007\G_Server2007.exe
文件路径:C:\WINDOWS\RAV2007.BAT
触发规则:所有程序规则->文件规则->%systemdrive%\*.bat

显示全部楼层 · 发表于 2007-9-10 17:01:56

楼主是在贬低nod还是卡巴？？

显示全部楼层 · 发表于 2007-9-10 17:03:38

LZ的意思是

当卡巴的病毒库拼不过nod的时候
这个世界疯了

显示全部楼层 · 发表于 2007-9-10 17:27:22

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4108
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\G_Server2007.exe

C:\Documents and Settings\uhthn\Desktop\G_Server2007.exe - Suspicious of Win32.Backdoor.Delf.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

[病毒样本] G_Server2007.exe [md5:500a54]

本帖子中包含更多资源

本帖子中包含更多资源

卡7过

回复 6楼 jhtl 的帖子