Hupigon

显示全部楼层 · 发表于 2008-4-2 11:12:46

已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.bfvr 檔案: C:\Documents and Settings\kato9096\桌面\複製 -AutoRun.rar/AutoRun.inf
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.bfvr 檔案: C:\Documents and Settings\kato9096\桌面\複製 -AutoRun.rar/svchct.exe

显示全部楼层 · 发表于 2008-4-2 11:14:15

C:\Documents and Settings\Don johnson\桌面\AutoRun.rar » RAR » svchct.exe - probably a variant of Win32/Hupigon trojan

显示全部楼层 · 发表于 2008-4-2 11:14:25

Starting the file scan:

Begin scan in 'E:\AutoRun.rar'
E:\AutoRun.rar
  [0] Archive type: RAR
  --> svchct.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-2 11:22:09

[Found backdoor] <W32/Hupigon.G.gen!Eldorado (not disinfectable, generic)> C:\test\AutoRun.rar->svchct.exe

显示全部楼层 · 发表于 2008-4-2 12:52:19

微点砍掉

显示全部楼层 · 发表于 2008-4-2 12:56:01

MemScan:Trojan.Spy.Banker.AADY

显示全部楼层 · 发表于 2008-4-2 13:00:04

E:\VIRUS\AutoRun4.2\AutoRun.inf INF.Autorun.b 病毒还未处理

显示全部楼层 · 发表于 2008-4-2 14:11:51

detected backdoor.hupigon.fam

显示全部楼层 · 发表于 2008-4-2 14:14:39

检测到：木马程序 Backdoor.Win32.Hupigon.bfvr URL: http://bbs.kafan.cn/attachment.php?aid=230432//AutoRun.inf

显示全部楼层 · 发表于 2008-4-2 16:06:42

The file 'AutoRun.inf' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Hupigon.bfvr. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.03.105.

[病毒样本] Hupigon

本帖子中包含更多资源

one

本帖子中包含更多资源