新抓的灰鸽子,和几个X

显示全部楼层 · 发表于 2008-11-12 16:09:34

新抓的灰鸽子,和几个X

显示全部楼层 · 发表于 2008-11-12 16:13:30

F:\桌面.rar > RAR > windef.exe - Win32/Small.NJ 特洛伊木马
F:\桌面.rar > RAR > 1.exe - Win32/Packed.PEArmor.Gen 应用程序

显示全部楼层 · 发表于 2008-11-12 16:16:33

诺顿2个

显示全部楼层 · 发表于 2008-11-12 16:16:37

红伞全灭
Begin scan in 'E:\Download\Virus\桌面'
E:\Download\Virus\桌面\hellbot.exe
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[WARNING] The file was ignored!
E:\Download\Virus\桌面\windef.exe
[DETECTION] Is the TR/Downloader.Gen Trojan
[WARNING] The file was ignored!
E:\Download\Virus\桌面\1.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[WARNING] The file was ignored!

[ 本帖最后由 fzz8848 于 2008-11-12 16:44 编辑 ]

显示全部楼层 · 发表于 2008-11-12 16:17:59

显示全部楼层 · 发表于 2008-11-12 16:30:35

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\1.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 3F12AA8148AD0CE3788C35AFC1AC965C

A-squared ----- Backdoor.Win32.Hupigon!IK
Avast ----- Win32:Hupigon-DKZ [Trj]
Avg ----- Packed.PE-Armor
Antivir ----- BDS/Hupigon.Gen
BitDefender ----- Packer.PEArmor.A
ClamWin ----- Trojan.Graybird-16
Dr.Web ----- Nothing
Eset ----- Win32/Packed.PEArmor.Gen application
Ikarus ----- Backdoor.Win32.Hupigon
Jiangmin ----- Nothing
Kaspersky ----- Nothing
Kingsoft ----- Win32.Hack.HuigeziT.cz
Vba32 ----- Nothing

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\hellbot.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 1BD9503EA3FC51DDA59E97ADA40EDC45

A-squared ----- Trojan.Win32.Small.ymz!IK
Avast ----- Win32:Rootkit-gen [Rtk]
Avg ----- BackDoor.PoisonIvy
Antivir ----- TR/Crypt.XDR.Gen
BitDefender ----- Trojan.Downloader.Agent.ZCR
ClamWin ----- Nothing
Dr.Web ----- BackDoor.Poison.336
Eset ----- Nothing
Ikarus ----- Trojan.Win32.Small.ymz
Jiangmin ----- Trojan/Agent.boqb
Kaspersky ----- Trojan.Win32.Small.ymz
Kingsoft ----- Nothing
Vba32 ----- Nothing

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\windef.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 7E03DA4D772EB5CB3D4820836592CA24

A-squared ----- Trojan-PWS.Win32.Agent.hf!IK
Avast ----- Win32:Hupigon-ILT [Trj]
Avg ----- BackDoor.Generic4.OL
Antivir ----- TR/Downloader.Gen
BitDefender ----- Backdoor.Small.NJ
ClamWin ----- Nothing
Dr.Web ----- Trojan.DownLoader.14777
Eset ----- Win32/Small.NJ trojan
Ikarus ----- Trojan-PWS.Win32.Agent.hf
Jiangmin ----- Backdoor/Agent.iei
Kaspersky ----- Backdoor.Win32.Small.nj
Kingsoft ----- Win32.Hack.Netcorpse.c.17024
Vba32 ----- Backdoor.Win32.Small.nj

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2008/11/12 三 16:29:35.93

显示全部楼层 · 发表于 2008-11-12 16:38:46

清光

W32/Kenfa.D (virus)
C:\DOCUMENTS AND SETTINGS\SK\桌面\VIRUSRUN\081112\3\1.EXE Action: deleted

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-12
F-Secure Hydra: 2.08.8110, 2008-11-12

Result: 2 malware found
Trojan.Win32.Small.ymz (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\3\hellbot.exe Action: deleted
Backdoor.Win32.Small.nj (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\3\windef.exe Action: deleted

显示全部楼层 · 发表于 2008-11-12 16:41:18

12/11/2008 16:40:57 已刪除: Trojan.Win32.Small.ymz C:\Documents and Settings\kato9096\桌面\桌面.rar/hellbot.exe
12/11/2008 16:40:57 已刪除: Backdoor.Win32.Small.nj C:\Documents and Settings\kato9096\桌面\桌面.rar/windef.exe

TO KL

显示全部楼层 · 发表于 2008-11-12 16:42:19

微点拦截

显示全部楼层 · 发表于 2008-11-12 20:34:41

McAfee 报了1个。。

1.exe Generic Malware.gb
hellbot.exe no
windef.exe no

[病毒样本] 新抓的灰鸽子,和几个X

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源