刚找到的Win32.GreyBird [FBF6D2]

显示全部楼层 · 发表于 2007-10-22 15:20:40

刚找到的，没有空的虚拟机，不敢测试^_^
NOD32查出来的是Win32.GreyBird
OfficeScan查出来的是TROJ_GENERIC.APC

MD5
FBF6D21C273F0B2DD393DABB5FB3568E

显示全部楼层 · 发表于 2007-10-22 15:31:52

2007-10-22 15:31:50 1193038310 Administrator 828 Sign of "Win32:Hupigon-AMD [Trj]" has been found in "D:\Downloads\Win32[1].GreyBird.木马.rar\Win32.GreyBird.木马.exe\[PECompact]" file.

显示全部楼层 · 发表于 2007-10-22 15:35:59

detected: Trojan program Backdoor.Win32.Hupigon.dsk URL: http://bbs.kafan.cn/attachment.php?aid=142515//Win32.GreyBird.Ä¾Âí.exe//PE_Patch.PECompact//PecBundle//PECompact

显示全部楼层 · 发表于 2007-10-22 15:39:07

Begin scan in 'F:\Win32[1].GreyBird.木马.rar'
F:\Win32[1].GreyBird.木马.rar
  [0] Archive type: RAR
  --> Win32.GreyBird.Ä¾Âí.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.C02F01A0 Backdoor server programs
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-22 15:39:56

蜘蛛报鸽子

显示全部楼层 · 发表于 2007-10-22 15:43:41

微点砍掉

显示全部楼层 · 发表于 2007-10-22 15:45:24

显示全部楼层 · 发表于 2007-10-22 15:52:44

Start of the scan: 2007年10月22日  15:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\Desktop\Win32.GreyBird.木马.rar'
C:\Documents and Settings\Administrator\Desktop\Win32.GreyBird.木马.rar
  [0] Archive type: RAR
  --> Win32.GreyBird.Ä¾Âí.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Graybird.C02F01A0 Backdoor server programs
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-22 15:59:02

咖啡报了！

显示全部楼层 · 发表于 2007-10-22 16:35:10

不算很新，至少是一周前的毒了！

[病毒样本] 刚找到的Win32.GreyBird [FBF6D2]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源