QQPASS及其生成物

显示全部楼层 · 发表于 2007-11-9 11:28:04

RAV 2008虾米都没发现.

显示全部楼层 · 发表于 2007-11-9 11:48:57

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\Setup.rar'
C:\Users\morgan\Documents\
  Setup.rar
[0] Archive type: RAR
--> Setup.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> QQ.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-11-9 14:25:38

两个样本是一个，重复了。

显示全部楼层 · 发表于 2007-11-9 16:35:58

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\QQ.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\TENCENT\QQ\QQ.EXE
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\SETUP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-11-9 17:01:50

QQ.exe_, Setup.exe_ - Backdoor.Win32.Hupigon.cai

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

我下午明明扫描没发现

显示全部楼层 · 发表于 2007-11-9 19:39:43

RX20.17.41未查杀，

显示全部楼层 · 发表于 2007-11-9 19:41:01

C:\ABC\Setup.rar:\Setup.exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\Setup.rar:\QQ.exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\Setup.rar

3 文件被扫描
(1 压缩档 2 文件)
2 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.344

显示全部楼层 · 发表于 2007-11-9 19:46:05

瑞星08主动防御干掉

显示全部楼层 · 发表于 2007-11-9 23:07:18

AVAST灭之

[病毒样本] QQPASS及其生成物

本帖子中包含更多资源

本帖子中包含更多资源