ace428,好久没有发鸽子的了,我发一个!

显示全部楼层 · 发表于 2007-9-22 22:42:21

蜘蛛报BackDoor.Huai.531,搞笑的名字

显示全部楼层 · 发表于 2007-9-22 22:44:12

显示全部楼层 · 发表于 2007-9-22 22:44:50

R:\r_server.rar » RAR » r_server.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2007-9-22 22:46:19

--> r_server.exe
[DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen

报壳不能少雨伞的~

显示全部楼层 · 发表于 2007-9-22 22:48:09

detected: Trojan program Backdoor.Win32.Hupigon.mzy URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2007-9-22 23:09:54

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 216
Paranoia Database - 5541
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\r_server.exe

C:\Documents and Settings\uhthn\Desktop\r_server.exe - Suspicious of Win32.Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-23 03:28:45

金山毒霸杀掉了

显示全部楼层 · 发表于 2007-9-23 06:10:57

2007-9-23 6:10:55 1190499055 Administrator 3252 Sign of "Win32:Hupigon-FB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\r_server.rar\r_server.exe\[UPX]" file.

显示全部楼层 · 发表于 2007-9-23 10:21:43

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\R_SERVER.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\REJOICE91.EXE
2) C:\REJOICE91.EXE
3) D:\REJOICE91.EXE
是否删除木马程序及其衍生物?

[病毒样本] ace428,好久没有发鸽子的了,我发一个!

本帖子中包含更多资源

本帖子中包含更多资源