一个小时前的鸽子

显示全部楼层 · 发表于 2007-4-29 03:39:48

呵呵

显示全部楼层 · 发表于 2007-4-29 03:41:21

这么晚了还在抓。。。就当夜宵算了。。。

显示全部楼层 · 发表于 2007-4-29 03:45:18

nod32挂了

显示全部楼层 · 发表于 2007-4-29 04:46:21

红伞杀咯~~~~~

Begin scan in 'C:\Documents and Settings\worm\桌面\qqtry.rar'
C:\Documents and Settings\worm\桌面\qqtry.rar
  [0] Archive type: RAR
  --> QQtry.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    A backup was created as '46a7b299.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-29 04:56:48

AhnLab-V3 2007.4.28.0 04.27.2007  no virus found
AntiVir 7.4.0.15 04.28.2007 HEUR/Crypted
Authentium 4.93.8 04.27.2007  no virus found
Avast 4.7.981.0 04.26.2007  no virus found
AVG 7.5.0.464 04.26.2007  no virus found
BitDefender 7.2 04.28.2007  no virus found
CAT-QuickHeal 9.00 04.28.2007  no virus found
ClamAV devel-20070416 04.28.2007  no virus found
DrWeb 4.33 04.28.2007 BackDoor.Pigeon.1604
eSafe 7.0.15.0 04.27.2007 suspicious Trojan/Worm
eTrust-Vet 30.7.3601 04.27.2007  no virus found
Ewido 4.0 04.27.2007  no virus found
FileAdvisor 1 04.28.2007  no virus found
Fortinet 2.85.0.0 04.28.2007 suspicious
F-Prot 4.3.2.48 04.27.2007  no virus found
F-Secure 6.70.13030.0 04.28.2007 Hupigon.gen12
Ikarus T3.1.1.5 04.28.2007 Backdoor.Win32.Hupigon.BV
Kaspersky 4.0.2.24 04.28.2007  no virus found
McAfee 5019 04.27.2007  no virus found
Microsoft 1.2405 04.28.2007 VirTool:Win32/Obfuscator.A
NOD32v2 2226 04.28.2007  no virus found
Norman 5.80.02 04.27.2007  no virus found
Panda 9.0.0.4 04.28.2007 Suspicious file
Prevx1 V2 04.28.2007  no virus found
Sophos 4.17.0 04.28.2007 Mal/Packer
Sunbelt 2.2.907.0 04.19.2007  no virus found
Symantec 10 04.28.2007  no virus found
TheHacker 6.1.6.088 04.09.2007  no virus found
VBA32 3.11.4 04.28.2007  no virus found
VirusBuster 4.3.7:9 04.28.2007  no virus found
Webwasher-Gateway 6.0.1 04.28.2007 Heuristic.Crypted

显示全部楼层 · 发表于 2007-4-29 05:41:08

试图创建冒充Vista的服务

显示全部楼层 · 发表于 2007-4-29 06:17:58

不是冒充vista服务，我记得鸽子默认服务的名字就叫做windows xp vista..

显示全部楼层 · 发表于 2007-4-29 06:45:54

费尔的启发式报壳

显示全部楼层 · 发表于 2007-4-29 07:49:49

Starting the file scan:

Begin scan in 'F:\样本\qqtry.rar'
F:\样本\qqtry.rar
  [0] Archive type: RAR
  --> QQtry.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-29 07:55:33

已检测到: 木马程序 Backdoor.Win32.Hupigon.gs URL: http://bbs.kafan.cn/attachment.php?aid=61293//QQtry.exe
卡巴的响应速度确实快……

[病毒样本] 一个小时前的鸽子

本帖子中包含更多资源

本帖子中包含更多资源