鸽子

显示全部楼层 · 发表于 2007-4-9 01:02:35

红色的鸽子哦

显示全部楼层 · 发表于 2007-4-9 01:17:05

木马名称:Backdoor.Win32.Huigezi.pnp

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\红鸽子\红鸽子.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

微点报已知……
LZ早点休息，注意身体，我都感冒了……

显示全部楼层 · 发表于 2007-4-9 01:22:12

Scan performed at: 2007-4-9 1:22:14
Scanning Log
NOD32 version 2173 (20070407) NT
Command line: C:\Documents and Settings\EQ2\桌面\红鸽子.rar
Operating memory - is OK

Date: 9.4.2007 Time: 01:22:18
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\红鸽子.rar
C:\Documents and Settings\EQ2\桌面\红鸽子.rar ?RAR ?红鸽子.exe - probably a variant of Win32/GreyBird trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:22:23 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2007-4-9 01:24:55

avast!飘过,金山拿下

显示全部楼层 · 发表于 2007-4-9 01:54:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\��.rar'
C:\Documents and Settings\morgan\My Documents\
  ��.rar
[0] Archive type: RAR
--> ºì¸ë×Ó.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.BPF.1 Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-10 03:04:11

[EXECUTE]                            2007.04.10 03:01:54
[ALLOW]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[FROM]                               C:\windows\Explorer.EXE
                                    Command Line:C:\windows\Explorer.EXE

[CREATE FILE]                         2007.04.10 03:01:57
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\Temp\
                                    File: Services.exe

[CREATE FILE]                         2007.04.10 03:01:58
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\Temp\
                                    File: Services.exe

[CREATE FILE]                         2007.04.10 03:02:00
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            Folder: C:\windows\Temp\
                                    File: Services.exe

[INSTALL SERVICE/DRIVER/ROOTKIT]       2007.04.10 03:02:03
[BLOCK]                               C:\Documents and Settings\Administrator\
                                    Command Line:"C:\Documents and Settings\Administrator\
[ACCESS TO]                            C:\windows\Temp\Services.exe

[ 本帖最后由 jlennon 于 2007-4-10 03:07 编辑 ]

显示全部楼层 · 发表于 2007-4-10 22:28:38

KIS已删除: 木马程序 Backdoor.Win32.Hupigon.epu 文件: D:\Downloads\红鸽子.rar\红鸽子.exe

显示全部楼层 · 发表于 2007-4-11 01:30:56

微点删除

显示全部楼层 · 发表于 2007-4-11 08:38:45

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

显示全部楼层 · 发表于 2007-4-11 09:36:45

瑞星删除
Backdoor.Gpigeon.rat

鸽子

本帖子中包含更多资源

本帖子中包含更多资源