2008新年新气像，最新木马mshta.exe独步天下

显示全部楼层 · 发表于 2008-2-10 22:48:45

Hello,

mshta.exek - Backdoor.Win32.Hupigon.auwb

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-2-11 17:13:01

The file 'mshta.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

显示全部楼层 · 发表于 2008-2-11 17:30:01

F-secure

Result: 1 malware found
Backdoor.Win32.Hupigon.auwb (virus)

显示全部楼层 · 发表于 2008-2-11 20:20:48

2008年2月11日 20:19:19 - 20:19:23
计算机名称: JLJ
扫描类型: 扫描指定目标
目标: E:\下载\mshta[1].part2.rar E:\下载\mshta[1].part1.rar

--------------------------------------------------------------------------------

结果: 发现1个恶意软件
Backdoor.Win32.Hupigon.auwb (病毒)
E:\下载\mshta[1].part1.rar 操作: 已重命名

显示全部楼层 · 发表于 2008-2-12 00:54:22

楼主的那个样本估计也不怎么高明

至于6楼的加壳后的东西，不好意思，也让你失望了

[病毒样本] 2008新年新气像，最新木马mshta.exe独步天下

回复 24楼 Graybird 的帖子

fs

本帖子中包含更多资源