hupigeonx7

显示全部楼层 · 发表于 2008-9-6 15:59:21

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Suspicious.Backdoor.Win32.ShangXing.a
病毒： Backdoor.Win32.ShangXing.ek

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.60.51

病毒 2008-09-06  15:59:46 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (7).exe Win32.Troj.IAgent.mv.727035 清除成功
病毒 2008-09-06  15:59:46 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (4).exe Win32.Troj.IAgent.mv.720896 清除成功
病毒 2008-09-06  15:59:46 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (5).exe Win32.Troj.IAgent.mv.720896 清除成功
病毒 2008-09-06  15:59:46 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (6).exe Win32.Troj.IAgent.mv.1118208 清除成功
病毒 2008-09-06  15:59:46 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (3).exe Win32.Troj.IAgent.mv.720896 清除成功

显示全部楼层 · 发表于 2008-9-6 15:59:59

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... 72&t=1220687978
Information: Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.28, VDF 7.0.6.124

显示全部楼层 · 发表于 2008-9-6 16:02:02

升级再杀1

病毒 2008-09-06 16:01:42 C:\Documents and Settings\Administrator\桌面\pg\hupigeon (1).exe Win32.Hack.ShangXing.a.1564672 清除成功

显示全部楼层 · 发表于 2008-9-6 16:04:05

Starting the file scan:

Begin scan in 'C:\Users\Morgan\Desktop\pg'
C:\Users\Morgan\Desktop\pg\
  hupigeon (1).exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
  hupigeon (2).exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
  hupigeon (3).exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
  hupigeon (4).exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
[NOTE]    The file was deleted!
  hupigeon (5).exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
  hupigeon (6).exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
  hupigeon (7).exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年9月6日  01:03
Used time: 00:06 Minute(s)

The scan has been done completely.

   1 Scanning directories
   7 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   7 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   7 Notes

显示全部楼层 · 发表于 2008-9-6 16:15:16

总结一下 = =

信息 2008-09-06  16:10:59 您此次查毒隔离了6个文件
信息 2008-09-06  16:10:59 您此次查毒共查出6个病毒以及危险代码
信息 2008-09-06  16:10:59 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件9个
信息 2008-09-06  16:10:59 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (7).exe Win32.Troj.IAgent.mv.727035 隔离成功
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (6).exe Win32.Troj.IAgent.mv.1118208 隔离成功
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (5).exe Win32.Troj.IAgent.mv.720896 隔离成功
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (4).exe Win32.Troj.IAgent.mv.720896 隔离成功
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (3).exe Win32.Troj.IAgent.mv.720896 隔离成功
病毒 2008-09-06  16:10:59 D:\Desktop\pg\hupigeon (1).exe Win32.Hack.ShangXing.a.1564672 隔离成功

显示全部楼层 · 发表于 2008-9-6 17:04:54

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PG[1]\HUPIGEON (5).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\123.EXE
2) C:\WINDOWS\SYSTEM32\_123.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PG[1]\HUPIGEON (7).EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PG[1]\HUPIGEON (6).EXE
并生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\REJOICE082.EXE
2) C:\REJOICE082.EXE
3) C:\AUTORUN.INF
4) D:\REJOICE082.EXE
5) D:\AUTORUN.INF
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-9-6 17:11:24

第7个过kis8自动模式

显示全部楼层 · 发表于 2008-9-6 17:13:39

居然没报到huipigon

报的不准厄

显示全部楼层 · 发表于 2008-9-6 17:18:53

是什么时候的鸽子？怎么大部分都能报了？这个鸽子貌似还没加壳的，对吗？

[病毒样本] hupigeonx7

7/3

回复 6楼挪威的冬天的帖子

[病毒样本] hupigeonx7

7/3

回复 6楼 挪威的冬天 的帖子

回复 6楼挪威的冬天的帖子