cenkut.com » hupigon virüsü http://www.cenkut.com virus - worm - trojan - spyware - mallware - antivirus LAB Sun, 29 Aug 2010 09:16:18 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 GrayBird Rootkit kullanan 103 Farklı Virüsü Temizlemek http://www.cenkut.com/graybird-rootkit-kullanan-103-farkli-virusu-temizlemek/ http://www.cenkut.com/graybird-rootkit-kullanan-103-farkli-virusu-temizlemek/#comments Sun, 02 Aug 2009 07:18:12 +0000 admin http://www.cenkut.com/?p=348

Backdoor virüslerinin vazgeçilmez unsuru olan rootkitler virüslerin önemli bölümlerinden biridir.Symantec tespit ettiği GrayBird Rootkit şuana kadar Çin meşeiyli 99 , İngiltere meşeiyli 2 , Brezilya 1 ve Almanya’da 1 farklı virüste tespit edilmiştir.

GrayBird Rootkit’ini Kullanan Virüslerin Listesi

BackDoor-AWQ [McAfee] 45
BackDoor-AWQ.b [McAfee] 32
Generic.dx [McAfee] 28
Backdoor.Win32.Hupigon.caky [Kaspersky Lab] 25
Backdoor:Win32/Hupigon [Microsoft] 22
BKDR_HUPIGON.FVR [Trend Micro] 20
Backdoor.Hupigon.GEN [PC Tools] 18
New Malware.gr [McAfee] 17
Backdoor.Win32.Hupigon.bjxn [Kaspersky Lab] 16
BKDR_HUPIGON.VEM [Trend Micro] 16
Backdoor:Win32/Hupigon.gen!B [Microsoft] 15
BKDR_HUPIGON.IX [Trend Micro] 15
BackDoor-ARR [McAfee] 14
Backdoor.Win32.Hupigon [Ikarus] 12
Backdoor.Win32.Hupigon.nqr [Kaspersky Lab] 12
BKDR_HUPIGON.GEN [Trend Micro] 11
Backdoor.Graybird.GEN [PC Tools] 9
BackDoor-AWQ.svr.gen.a [McAfee] 8
Mal/DSpy-B [Sophos] 7
Backdoor.Hupigon [Ikarus] 6
Backdoor.Win32.Hupigon.aahl [Kaspersky Lab] 6
Mal/GrayBird-B, Mal/Behav-043 [Sophos] 6
Trojan-Downloader.Win32.Delf.aup [Ikarus] 6
BackDoor-AWQ.svr.gen.e [McAfee] 5
Mal/Emogen-S [Sophos] 5
Backdoor.Hupigon!sd5 [PC Tools] 4
Backdoor.Win32.GrayBird.EJ [Ikarus] 4
Backdoor.Win32.Hupigon.auh [Kaspersky Lab] 4
Backdoor.Win32.Hupigon.axbr [Kaspersky Lab] 4
Backdoor.Win32.Hupigon.hrp [Kaspersky Lab] 4
BehavesLikeWin32.ExplorerHijack [Ikarus] 4
Generic.Graybird [Ikarus] 4
TROJ_PROXY.GD [Trend Micro] 4
VirTool:Win32/DelfInject.gen!L [Microsoft] 4
Backdoor.Hupigon.GTB [PC Tools] 3
Backdoor.Win32.Hupigon.adi [Kaspersky Lab] 3
Backdoor.Win32.Hupigon.bmjp [Kaspersky Lab] 3
Backdoor.Win32.Hupigon.mlt [Kaspersky Lab] 3
Backdoor.Win32.Hupigon.mmt [Kaspersky Lab] 3
Backdoor:Win32/Hupigon.gen [Microsoft] 3
BackDoor-ARR.svr [McAfee] 3
BKDR_HUPIGON.EWE [Trend Micro] 3
BKDR_HUPIGON.PEP [Trend Micro] 3
Mal/Behav-058, Mal/DSpy-B, Mal/Behav-157 [Sophos] 3
Mal/Emogen-E [Sophos] 3
Mal/EncPk-AP, Mal/Behav-058, Mal/Hupig-E, Mal/DSpy-B, Mal/Behav-157, Mal/Behav-043 [Sophos] 3
New Malware.dq [McAfee] 3
Trojan.Win32.StartPage [Ikarus] 3
Backdoor.Graybird!sd6 [PC Tools] 2
Backdoor.Hupigon.HHW [PC Tools] 2
Backdoor.Hupigon.SAJ [PC Tools] 2
Backdoor.Win32.GrayBird.jj [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.abmi [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.adma [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.aqf [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.ave [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.bns [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.cal [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.cmvm [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.eko [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.elw [Kaspersky Lab] 2
Backdoor.Win32.Hupigon.qbq [Kaspersky Lab] 2
BackDoor-AWQ.svr.gen.b [McAfee] 2
BKDR_GRAYBIR.GC [Trend Micro] 2
BKDR_HUPIGON.EVG [Trend Micro] 2
BKDR_HUPIGON.JSF [Trend Micro] 2
Cryp_Pai-3 [Trend Micro] 2
Generic BackDoor [McAfee] 2
Mal/Basine-C [Sophos] 2
Mal/Behav-043, Mal/Emogen-E [Sophos] 2
Mal/Behav-043, Mal/Emogen-S, Mal/Basine-C [Sophos] 2
Mal/DSpy-B, Mal/Behav-157, Mal/Emogen-S [Sophos] 2
Mal/EncPk-AP, Mal/Behav-058, Mal/DSpy-B, Mal/Behav-157 [Sophos] 2
Mal/EncPk-BN [Sophos] 2
Mal/Generic-A [Sophos] 2
Mal/Hupig-D, Mal/DSpy-B [Sophos] 2
Mal/Hupig-E, Mal/Behav-058, Mal/DSpy-B, Mal/Behav-157, Mal/Behav-043 [Sophos] 2
Mal/Packer, Mal/DSpy-B [Sophos] 2
Mal/Packer, Mal/GrayBird-B, Mal/Behav-043 [Sophos] 2
New Malware.bj [McAfee] 2
New Malware.u [McAfee] 2
TROJ_BANDOK.BI [Trend Micro] 2
TROJ_DELF.EJU [Trend Micro] 2
TrojanDropper:Win32/Dowque.A [Microsoft] 2
TrojanDropper:Win32/Hupigon.gen!A [Microsoft] 2
VirTool.Win32.DelfInject [Ikarus] 2
VirTool:Win32/DelfInject [Microsoft] 2
Virus.Win32.Hupigon.AMD [Ikarus] 2
Virus.Win32.Hupigon.OH [Ikarus] 2
Win-Trojan/Hupigon.Gen [AhnLab] 2
Win-Trojan/Xema.variant [AhnLab] 2
Worm:Win32/Autorun.PP [Microsoft] 2
Backdoor.Agent.AIMB [PC Tools] 1
Backdoor.Delf.XLP [PC Tools] 1
Backdoor.GrayBird.BC!AU [PC Tools] 1
Backdoor.Hupigon.AOUM [PC Tools] 1
Backdoor.Hupigon.ARVG [PC Tools] 1
Backdoor.Hupigon.AWCU [PC Tools] 1
Backdoor.Hupigon.BLIN [PC Tools] 1
Backdoor.Hupigon.DMH [PC Tools] 1

GrayBird Rootkit’nin bilgisayarınıza yukarıdaki bir virüs ile bulaşması durumunda oluşturacağı dosyalar;

%CommonFavorites%\beos.exe
%ProgramFiles%\entvip2008\kavservs.exe
%ProgramFiles%\internet explorer\svchosi.exe
%ProgramFiles%\microsoft\msdep.exe
%ProgramFiles%\sachost.exe
%ProgramFiles%\windows media player\timplatform.exe
%System%\_drivers.exe
%System%\_rejoice44.exe
%System%\_scvhost.exe
%System%\_servernet.exe
%System%\_system.exe
%System%\accountsmanager.exe
%System%\ati.exe
%System%\drivers.exe
%System%\explor.exe
%System%\g_server2.03.exe
%System%\heigezi2009.exe
%System%\install.dll
%System%\intelr.exe
%System%\lxwx.dll
%System%\ly_server2008.exe
%System%\nerocheck.dll
%System%\nerocheck.exe
%System%\rejoice2007.exe
%System%\servidor.exe
%System%\svch0st.exe
%System%\sysecser.exe
%System%\windows.exe
%Temp%\hubba.exe
%Temp%\ixp000.tmp\1.exe
%Temp%\ixp000.tmp\11.exe
%Temp%\ixp000.tmp\4.exe
%Temp%\kendy.exe
%Temp%\mm.exe
%Temp%\server_setup.exe
%Temp%\tempdir.exe
%Windir%\1.exe
%Windir%\360tary.exe
%Windir%\521.exe
%Windir%\baidu.com
%Windir%\coines.exe
%Windir%\foxrun.exe
%Windir%\g_server.exe
%Windir%\g_server2006.dll
%Windir%\g_server2006.exe
%Windir%\ghfhgjhnssjdw.exe
%Windir%\guocyok88.exe
%Windir%\hacker.com.cn.exe
%Windir%\hgzp.dll
%Windir%\l_server2.03.exe
%Windir%\lingdu.com.cn.exe
%Windir%\nessus.exe
%Windir%\prints.exe
%Windir%\rec.exe
%Windir%\runmgr.exe
%Windir%\scl.dll
%Windir%\servel.exe
%Windir%\server.exe
%Windir%\suchost.exe
%Windir%\svch0st.exe
%Windir%\svchost.exe
%Windir%\svchost2.03.exe
%Windir%\sysoop.com.cn.exe
%Windir%\system.exe
%Windir%\system\systen.exe
%Windir%\tvsb.exe
%Windir%\win32.exe
%Windir%\windows.com.cn.exe
%Windir%\windows.exe
%Windir%\wuauclt.exe
%Windir%\www.cmder.com.exe
%Windir%\www.darkst.com
c:\dyc.exe
c:\scvhost.exe
c:\server101.exe
c:\system.exe
c:\windowsboot.exe
]]> http://www.cenkut.com/graybird-rootkit-kullanan-103-farkli-virusu-temizlemek/feed/ 0 {\rtf1}