一后门

显示全部楼层 · 发表于 2008-2-6 17:58:50

C:\ABC\ant\ant.rar:\ant.exe - 特征码 'Backdoor.Win32.Hupigon.btl' 被发现
C:\ABC\ant\ant.rar
乱报

显示全部楼层 · 发表于 2008-2-6 18:01:30

E:\virus\ant.rar » RAR » ant.exe - Win32/Agent.CXD trojan - was a part of the deleted object
E:\virus\ant.rar - Win32/Agent.CXD trojan - deleted - quarantined

显示全部楼层 · 发表于 2008-2-6 18:03:17

卡巴继续飘~

显示全部楼层 · 发表于 2008-2-6 18:06:26

AVAST

Win32:Delf-APJ [Trj]

显示全部楼层 · 发表于 2008-2-6 18:06:59

Starting the file scan:

Begin scan in 'D:\BOOK\ant.rar'
D:\BOOK\ant.rar
  [0] Archive type: RAR
  --> ant.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-6 18:15:32

ClamAV
I:\virus\test/ant.exe: Trojan.Dropper.Small-159 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 206736
Engine version: 0.92
Scanned directories: 1
Scanned files: 1
Infected files: 1
Data scanned: 0.02 MB
Time: 7.328 sec (0 m 7 s)

显示全部楼层 · 发表于 2008-2-6 18:23:59

rising20.30.20未认得！

显示全部楼层 · 发表于 2008-2-6 20:19:09

The file 'ant.exe' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Agent.YOJ. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

显示全部楼层 · 发表于 2008-2-6 20:20:20

ant.rar\ant.exe;C:\Documents and Settings\Administrator\桌面\ant.rar;BackDoor.Pigeon.6620;;
ant.rar;C:\Documents and Settings\Administrator\桌面;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2008-2-6 20:57:12

程序:
C:\DOCUMENTS AND SETTINGS\小尚\LOCAL SETTINGS\TEMP\RAR$EX00.890\ANT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\ANT.EXE
是否删除木马程序及其衍生物?

[病毒样本] 一后门

本帖子中包含更多资源

已知