4个样本

gzg

扫扫看

promised

C:\ABC\新建文件夹\NTDEKECT.EXE
C:\ABC\新建文件夹\Server.exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\新建文件夹\svchost.exe - 特征码 'Backdoor.Win32.Hupigon.dsx' 被发现
C:\ABC\新建文件夹\zuixiaohua.exe - 特征码 'Backdoor.Win32.HacDef.073.B' 被发现

promised

C:\ABC\新建文件夹\NTDEKECT.EXE
        C:\ABC\新建文件夹\Server.exe
>>> Virus 'Mal/Emogen-E' found in file C:\ABC\新建文件夹\Server.exe
>>> Virus 'Mal/GrayBird-B' found in file C:\ABC\新建文件夹\Server.exe
        C:\ABC\新建文件夹\svchost.exe
>>> Virus 'Mal/Behav-043' found in file C:\ABC\新建文件夹\svchost.exe
        C:\ABC\新建文件夹\zuixiaohua.exe
>>> Virus 'Mal/EncPk-AA' found in file C:\ABC\新建文件夹\zuixiaohua.exe

qigang

RX20.21.61全过，一个未杀。

scottxzt

木马名称:Backdoor.Win32.GreyPigeon.cem

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹\SVCHOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

scottxzt

2007-12-9 19:02:08,Backdoor.Hupigon.abad.frdp,后门,dell,C:\Documents and Settings\dell\桌面\新建文件夹\zuixiaohua.exe,Manual scan
2007-12-9 19:02:08,Heuri.Possible/Packed,启发式扫描,dell,C:\Documents and Settings\dell\桌面\新建文件夹\Server.exe,Manual scan

韩若雪

ESET Smart Security 只查到两个！！
恐慌中！！！

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹'
C:\Documents and Settings\Administrator\桌面\新建文件夹\svchost.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.KMX Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\zuixiaohua.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!

AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 23:10:15 2007-12-9
+ Scan result:

C:\Documents and Settings\Administrator\桌面\新建文件夹\svchost.exe -> Backdoor.Hupigon.awp : Cleaned.
C:\Documents and Settings\Administrator\桌面\新建文件夹\zuixiaohua.exe -> Backdoor.Hupigon.mqt : Cleaned.

::Report end

[ 本帖最后由 nosferatu 于 2007-12-9 23:10 编辑 ]

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1056
Paranoia Database - 49948
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Server.exe - Infected WIN32.BACKDOOR.HUPIGON.10 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\zuixiaohua.exe - Infected WIN32.BACKDOOR.XIAOBIRD.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\NTDEKECT.EXE - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.17
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\svchost.exe - Infected WIN32.TROJAN.DELF.5 - Deleted

4 Files scanned
3 Infected files found
1 Suspected files found
0 Files disinfected
3 Files deleted

yiwy

原帖由 韩若雪 于 2007-12-9 21:40 发表
ESET Smart Security 只查到两个！！
恐慌中！！！

ESET没那么差吧？