鸽子[MD5: 588EC3 2DB306 F8B27A 4AAA25 C7B021 A42D81 A3337D A3337D 04FB40 588EC3]

Cloud018

今天的早餐！吃N个鸽子！

已检测到: 风险软件 Hidden object 运行进程: C:\SNOWTEST\System32\RaV.exe
已删除: 病毒 Packed.Win32.NSAnti.p 文件: C:\qq.exe
已删除: 病毒 Packed.Win32.NSAnti.p 文件: C:\SNOWTEST\System32\RaV.exe
已删除: 木马程序 Backdoor.Win32.Hupigon.gs 文件: C:\gg.exe
已删除: 病毒 Packed.Win32.NSAnti.p 文件: C:\Program Files\msn\msn.cc
已删除: 病毒 Packed.Win32.Morphine.a (修改) 文件: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\br.dll
已删除: 木马程序 Backdoor.Win32.Hupigon.gs 文件: C:\WINDOWS\Hacker.com.cn.exe
已删除: 木马程序 Backdoor.Win32.Hupigon.gs 文件: C:\WINDOWS\G_Server1.23.exe


最后三只卡巴不报！！！

[MD5: 588EC3 2DB306 F8B27A 4AAA25 C7B021 A42D81 A3337D A3337D 04FB40 588EC3]

[ 本帖最后由 Cloud018 于 2007-6-6 11:49 编辑 ]

kp2006

规定发贴

Kaspersky Anti-Virus 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=82794 is infected with Packed.Win32.NSAnti.p virus

Kaspersky Anti-Virus 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=82795 is infected with Packed.Win32.NSAnti.p virus

[ 本帖最后由 kp2006 于 2007-6-6 11:40 编辑 ]

wangjay1980

以后按规定发帖，你没感觉样本区和以前不一样了吗

Cloud018

原帖由 kp2006 于 2007-6-6 11:39 发表
规定发贴

Kaspersky Anti-Virus 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=82794 is infected with Packed.Win32.NSAnti.p virus

？？？什么规定发贴？？？

另外，第一个可能是下载者。

lanvin

看置顶

taihuxian

1
Virus: Packed.Win32.NSAnti.p

Virus found while downloading Web content.

Address: bbs.kafan.cn

2
Virus: Packed.Win32.NSAnti.p

Virus found while downloading Web content.

Address: bbs.kafan.cn

3
Virus: Backdoor.Win32.Hupigon.gs

Virus found while downloading Web content.

Address: bbs.kafan.cn
4
Virus: Packed.Win32.NSAnti.p

Virus found while downloading Web content.

Address: bbs.kafan.cn
5
Virus: Win32:Detnat-AZ [Wrm]

Virus found while downloading Web content.

Address: bbs.kafan.cn
6
Virus: Win32:Detnat-AZ [Wrm]

Virus found while downloading Web content.

Address: bbs.kafan.cn
7
Virus: Backdoor.Win32.Hupigon.gs

Virus found while downloading Web content.

Address: bbs.kafan.cn
8
懒的解压
9
Virus: Win32:Detnat-AZ [Wrm]

Virus found while downloading Web content.

Address: bbs.kafan.cn
10
Virus: Win32:Detnat-AZ [Wrm]

Virus found while downloading Web content.

Address: bbs.kafan.cn

Cloud018

改了！

PS：由于标题太长，所以不能用原来的标题了！

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\jpk2bo'
C:\Documents and Settings\Administrator\My Documents\jpk2bo\
  2.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  br.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  gg.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '469432f3.qua'!
  G_Server1.23.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '46b932eb.qua'!
  Hacker.com.cn.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '46c932ee.qua'!
  jpk2bo.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  msn.cc
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      The file was deleted!
  qq.exe
      [DETECTION] Is the Trojan horse TR/Pakes.F.1
      [INFO]      The file was deleted!
  RaV.exe
      [DETECTION] Is the Trojan horse TR/Pakes.F.1
      [INFO]      The file was deleted!
  Windows tys
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!


End of the scan: 2007年6月5日  21:05
Used time: 00:10 min

The scan has been done completely.

      1 Scanning directories
     10 Files were scanned
     10 viruses and/or unwanted programs were found
      3 classified as suspicious:
      7 files were deleted
      0 files were repaired
      3 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

woai_jolin

ESS

2007/6/6 19:24:12        Scanning Log
2007/6/6 19:24:12        Version of virus signature database: 2312 (20070606)
2007/6/6 19:24:12        Date: 6.6.2007  Time: 19:24:12
2007/6/6 19:24:12        Scanned disks, folders and files: E:\病毒测试\
2007/6/6 19:24:16        E:\病毒测试\2.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:24:16        E:\病毒测试\2.rar » RAR » 2.dll - Win32/Pacex.Gen virus
2007/6/6 19:24:21        E:\病毒测试\br.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:24:21        E:\病毒测试\br.rar » RAR » br.dll - Win32/Pacex.Gen virus
2007/6/6 19:24:25        E:\病毒测试\gg.rar - a variant of Win32/Hupigon trojan - deleted - quarantined
2007/6/6 19:24:25        E:\病毒测试\gg.rar » RAR » gg.exe - a variant of Win32/Hupigon trojan
2007/6/6 19:24:29        E:\病毒测试\G_Server1.23.rar - a variant of Win32/Hupigon trojan - deleted - quarantined
2007/6/6 19:24:29        E:\病毒测试\G_Server1.23.rar » RAR » G_Server1.23.exe - a variant of Win32/Hupigon trojan
2007/6/6 19:24:38        E:\病毒测试\jpk2bo.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:24:38        E:\病毒测试\jpk2bo.rar » RAR » jpk2bo.dll - Win32/Pacex.Gen virus
2007/6/6 19:24:48        E:\病毒测试\msn.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:24:48        E:\病毒测试\msn.rar » RAR » msn.cc - Win32/Pacex.Gen virus
2007/6/6 19:24:55        E:\病毒测试\qq.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:24:55        E:\病毒测试\qq.rar » RAR » qq.exe - Win32/Pacex.Gen virus
2007/6/6 19:25:03        E:\病毒测试\RaV.rar - Win32/Pacex.Gen virus - deleted
2007/6/6 19:25:03        E:\病毒测试\RaV.rar » RAR » RaV.exe - Win32/Pacex.Gen virus
2007/6/6 19:25:03        Number of scanned files: 17
2007/6/6 19:25:03        Number of threats found: 8
2007/6/6 19:25:03        Time of completion: 19:25:03  Total scanning time: 51 sec (00:00:51)

wangjay1980

detected: Trojan program Trojan.Win32.Agent.abf        URL: http://bbs.kafan.cn/attachment.php?aid=82803//2.dll
detected: Trojan program Backdoor.Win32.Hupigon.bxi        URL: http://bbs.kafan.cn/attachment.php?aid=82804//jpk2bo.dll
detected: Trojan program Backdoor.Win32.Hupigon.ddw        File: C:\Documents and Settings\Owner\×ÀÃæ\Windows tys[1].part1.rar/Windows tys


这是不报的