看这两个

显示全部楼层 · 发表于 2007-4-25 11:33:23

vb一直都对鸽子侦测率不是很好

显示全部楼层 · 发表于 2007-4-25 14:09:39

[ 本帖最后由 jlennon 于 2007-4-25 14:13 编辑 ]

显示全部楼层 · 发表于 2007-4-25 14:11:58

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\3533.rar'
C:\Documents and Settings\user\桌面\3533.rar
  [0] Archive type: RAR
  --> svchost_1177401686\new_1.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> svchost_1177401686\svchost.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
   [INFO]    A backup was created as '4661f11e.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-25 14:12:16

Scanned files

C:\=>Master Boot Record OK
C:\=>Primary partition 1 (Active) OK
C:\=>Logical partition 1 OK
C:\Documents and Settings\user\桌面\3533.rar OK
C:\Documents and Settings\user\桌面\3533.rar=>svchost_1177401686\new_1.exe Infected Generic.Graybird.19496122
C:\Documents and Settings\user\桌面\3533.rar=>svchost_1177401686\new_1.exe Deleted
C:\Documents and Settings\user\桌面\3533.rar Update failed
C:\Documents and Settings\user\桌面\3533.rar=>svchost_1177401686\svchost.exe Infected Trojan.NSAnti.B
C:\Documents and Settings\user\桌面\3533.rar=>svchost_1177401686\svchost.exe Deleted
C:\Documents and Settings\user\桌面\3533.rar Update failed
C:\Documents and Settings\user\桌面\3533.rar=>:Zone.Identifier OK

显示全部楼层 · 发表于 2007-4-25 14:13:43

显示全部楼层 · 发表于 2007-4-25 16:32:51

KIS621拦截了

显示全部楼层 · 发表于 2007-4-25 19:24:40

运行了一下new_1.exe

File:  new_1.rar
Status:  INFECTED/MALWARE
MD5  e6ca92180bdbeccdd2693ac531b2af75
Packers detected:  -

Scanner results
Scan taken on 25 Apr 2007 11:06:58 (GMT)
A-Squared  Found nothing
AntiVir  Found BDS/Hupigon.Gen
ArcaVir  Found Trojan.Hupigon.Cfz
Avast  Found Win32:Hupigon-FB
AVG Antivirus  Found nothing
BitDefender  Found Generic.Graybird.19496122
ClamAV  Found Trojan.Delf-614
Dr.Web  Found DLOADER.Trojan (probable variant)
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found Backdoor.Win32.Hupigon.deb
Fortinet  Found nothing
Kaspersky Anti-Virus  Found Backdoor.Win32.Hupigon.deb
NOD32  Found a variant of Win32/Hupigon
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found MalwareScope.Backdoor.Hupigon.3 (probable variant)

显示全部楼层 · 发表于 2007-4-26 00:03:03

费尔一个报启发,一个过了

[病毒样本] 看这两个

第一个

本帖子中包含更多资源

第二个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源