QQ堂Vip外挂[325105]

显示全部楼层 · 发表于 2007-11-2 21:09:38

C:\ABC\QQ堂Vip外挂\公主免杀.exe - 特征码 'Virus.Packed.Win32.Klone.af' 被发现

显示全部楼层 · 发表于 2007-11-2 21:12:06

Starting the file scan:

Begin scan in 'E:\QQ堂Vip外挂.rar'
E:\QQ堂Vip外挂.rar
  [0] Archive type: RAR
  --> QQÌÃVipÍâ¹Ò\¹«Ö÷ÃâÉ±.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-2 21:13:32

2007-11-2 21:12:45 1194009165 SYSTEM 1192 Sign of "Win32:Hupigon-DFK [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=147995\QQ堂Vip外挂\公主免杀.exe\[SVKP]" file.

显示全部楼层 · 发表于 2007-11-2 21:15:52

McAfee New Malware.n

显示全部楼层 · 发表于 2007-11-2 21:22:48

RX20.16.42未杀。

显示全部楼层 · 发表于 2007-11-2 21:23:09

程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.582\QQ堂VIP外挂\公主免杀.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SVKP.SYS
2) C:\WINDOWS\SYSTEM.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-11-2 21:53:32

C:\Documents and Settings\Don johnson\桌面\QQ堂Vip外挂.rar » RAR » QQ堂Vip外挂\公主免杀.exe - a variant of Win32/Hupigon trojan

显示全部楼层 · 发表于 2007-11-2 21:59:12

Hello,

####.exe_ - Backdoor.Win32.Hupigon.vhe

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: QQ?Vip??.rar

显示全部楼层 · 发表于 2007-11-2 22:16:21

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\QQÌÃVipÍâ¹Ò.rar/QQÌÃVipÍâ¹Ò\¹«Ö÷ÃâÉ±.exe

显示全部楼层 · 发表于 2007-11-3 16:36:43

KIS6已检测: 木马程序 Backdoor.Win32.Hupigon.vhe 文件: C:\Documents and Settings\Administrator\桌面\QQ堂Vip外挂.rar/QQ堂Vip外挂\公主免杀.exe

[病毒样本] QQ堂Vip外挂[325105]

本帖子中包含更多资源

一只鸽子

浏览过的版块