c5eee6,BD启发！

显示全部楼层 · 发表于 2007-9-17 13:19:55

扫描红伞未报，运行红伞报
Virus or unwanted program 'BDS/Hupigon.fdq.9 [BDS/Hupigon.fdq.9]'
detected in file 'C:\Documents and Settings\All Users\Favorites\plug\001.dll.
Action performed: Move file to quarantine
然后，微点报
程序:
C:\BOOT\NSS.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\****\LOCAL SETTINGS\TEMP\IXP000.TMP\NS.EXE
2) C:\DOCUMENTS AND SETTINGS\ALL USERS\FAVORITES\NETSERVICE.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\****\LOCAL SETTINGS\TEMP\IXP000.TMP\NS.EXE
删除失败!
延迟删除文件
所以红伞加微点，很好。

显示全部楼层 · 发表于 2007-9-17 14:02:11

eSafe 7.0.15.0 2007.09.16 1697631955

显示全部楼层 · 发表于 2007-9-17 14:23:41

Trojan-Spy.Win32.Agent.IK

显示全部楼层 · 发表于 2007-9-17 15:26:21

nod 挂神啊

显示全部楼层 · 发表于 2007-9-17 16:33:39

KIS7
已删除：木马程序 Backdoor.Win32.Hupigon.fdq 文件: D:\Downloads\NSS.rar/NSS.EXE/NS.exe//PE_Patch

显示全部楼层 · 发表于 2007-9-17 22:39:06

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 60
Paranoia Database - 5234
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\NSS.EXE

C:\Documents and Settings\uhthn\Desktop\NSS.EXE - Suspicious of Backdoor.Hupigon.3

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 60
Paranoia Database - 5234
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\NS.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\001.dll - Suspicious file

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-17 23:07:47

解压，杀

[病毒样本] c5eee6,BD启发！

本帖子中包含更多资源

浏览过的版块