brc_Server.rar

显示全部楼层 · 发表于 2008-4-25 13:17:23

Kaspersky Virus Scanner

Scanned file: brc_Server.rar
brc_Server.rar/brc_Server.exe2 - OK
brc_Server.rar/brc_Server.exe2 - OK

上报卡巴

Hello,

brc_Server.exe2 - Backdoor.Win32.Delf.hxt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-25 14:06 编辑 ]

显示全部楼层 · 发表于 2008-4-25 13:22:58

样本呢？

显示全部楼层 · 发表于 2008-4-25 13:27:33

已加了

显示全部楼层 · 发表于 2008-4-25 13:28:41

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\brc_Server.zip'
C:\Documents and Settings\Administrator\My Documents\
  brc_Server.zip
[0] Archive type: ZIP
--> brc_Server.exe2
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.J
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-25 13:29:55

Starting the file scan:

Begin scan in 'E:\AV\brc_Server.zip'
E:\AV\brc_Server.zip
  [0] Archive type: ZIP
  --> brc_Server.exe2
   [DETECTION] Contains detection pattern of the worm WORM/Otwycal.J
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-25 13:36:00

[Found backdoor] <W32/Hupigon.G.gen!Eldorado (not disinfectable, generic)> C:\test\brc_Server.zip->brc_Server.exe2

显示全部楼层 · 发表于 2008-4-25 13:36:36

25:04:2008 13:36:20 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\brc_Server
Directory scanned(filestreams): E:\VIRUS\brc_Server
File scanned: E:\VIRUS\brc_Server\brc_Server.exe2 - SIGNATURE FOUND "Generic.Graybird"
25:04:2008 13:36:21 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2008-4-25 14:05:07

金山 0

显示全部楼层 · 发表于 2008-4-25 14:05:57

Hello,

brc_Server.exe2 - Backdoor.Win32.Delf.hxt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-4-25 14:12:06

病毒: Backdoor.Hupigon.AAAH (BD 引擎)

[病毒样本] brc_Server.rar

本帖子中包含更多资源

回复 2楼 mofunzone 的帖子

IK