A97D0E

显示全部楼层 · 发表于 2007-8-24 12:38:49

A-Squared	3.0.0.123	2007.08.23	2007-08-23	-	5.775
AntiVir	7.4.1.63	6.39.1.38	2007-08-23	TR/Crypt.XPACK.Gen	2.833
Arcavir	1.0.4	200708231034	2007-08-23	-	2.187
Avast	1.0.8	000768-1	2007-08-24	-	5.630
AVG	7.5.48.442	269.12.4/969	2007-08-23	-	2.752
BitDefender	7.60825.814433	7.14469	2007-08-24	-	4.230
CA (VET)	8.4.0.24	31.1.5083	2007-08-24	-	1.236
ClamAV	0.91.1	4047	2007-08-24	-	0.016
Dr.Web	4.33	2007.08.23	2007-08-23	DDoS.Bonke	8.255
Ewido	4.0.0.2	2007.08.23	2007-08-23	-	5.525
F-Prot	3.16.16	2007.08.23	2007-08-23	W32/new-malware!Maximus	0.983
F-Secure	5.51.6100	2007.08.23.06	2007-08-23	-	0.745
Ikarus	T3.1.1.12	2007.08.23.69387	2007-08-23	Backdoor.Win32.Hupigon.awl	2.997
JiangMin	10.00.650	2007.08.23	2007-08-23	-	3.326
Kaspersky	5.5.10	2007.08.24	2007-08-24	-	0.089
KingSoft	2007.6.20.249	2007.8.24	2007-08-24	-	3.657
McAfee	5.1.00	5104	2007-08-23	-	2.894
mks_vir	2.01	2007.08.23	2007-08-23	-	2.781
NOD32	2.70.8	2481	2007-08-23	-	0.060
Norman	5.91.04	5.90	2007-08-23	-	26.395
nProtect	2007-08-23.00	37084	2007-08-23	-	7.018
Panda	9.00.00	2007.08.23	2007-08-23	Suspicious file	6.893
Quick Heal	9.00	2007.08.23	2007-08-23	Suspicious - DNAScan	9.350
Rising	19.0	19.37.40.00	2007-08-23	-	1.644
Sophos	2.47.0	4.19	2007-08-24	Mal/Packer	3.193
Symantec	1.3.0.24	20070823.021	2007-08-23	-	0.257
Trend Micro	8.500-1001	4.667.00	2007-08-22	-	0.101
VBA32	3.12.2.3	20070822.2130	2007-08-22	-	0.783
VirusBuster	4.3.19:9	9.099.2/11.0	2007-08-23	-	0.932

显示全部楼层 · 发表于 2007-8-24 12:48:30

Ikarus 报Backdoor.Win32.Hupigon.awl
乱报

显示全部楼层 · 发表于 2007-8-24 12:49:23

eset antivirus pass

显示全部楼层 · 发表于 2007-8-24 12:50:28

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\623.zip/623.exe//PE-Armor//PE-Crypt.Known

显示全部楼层 · 发表于 2007-8-24 12:55:44

老鹰说：“给我见鬼去吧！”

显示全部楼层 · 发表于 2007-8-24 13:47:39

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\623.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\623.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-8-24 13:53:13

AhnLab-V3 2007.8.22.0 2007.08.24 -
AntiVir 7.4.1.63 2007.08.23 TR/Crypt.XPACK.Gen
Authentium 4.93.8 2007.08.23 Possibly a new variant of W32/new-malware!Maximus
Avast 4.7.1029.0 2007.08.24 -
AVG 7.5.0.484 2007.08.23 -
BitDefender 7.2 2007.08.24 -
CAT-QuickHeal 9.00 2007.08.23 (Suspicious) - DNAScan
ClamAV 0.91 2007.08.24 -
DrWeb 4.33 2007.08.23 DDoS.Bonke
eSafe 7.0.15.0 2007.08.23 Suspicious Trojan/Worm
eTrust-Vet 31.1.5083 2007.08.24 -
Ewido 4.0 2007.08.23 -
FileAdvisor 1 2007.08.24 -
Fortinet 2.91.0.0 2007.08.24 -
F-Prot 4.3.2.48 2007.08.23 W32/Downloader-Sml-based!Maximus
F-Secure 6.70.13030.0 2007.08.24 -
Ikarus T3.1.1.12 2007.08.24 Backdoor.Win32.Hupigon.awl
Kaspersky 4.0.2.24 2007.08.24 -
McAfee 5104 2007.08.23 -
Microsoft 1.2803 2007.08.24 -
NOD32v2 2481 2007.08.24 -
Norman 5.80.02 2007.08.23 -
Panda 9.0.0.4 2007.08.24 Suspicious file
Prevx1 V2 2007.08.24 -
Rising 19.37.41.00 2007.08.24 -
Sophos 4.20.0 2007.08.24 Mal/Packer
Sunbelt 2.2.907.0 2007.08.24 VIPRE.Suspicious
Symantec 10 2007.08.24 -
TheHacker 6.1.8.172 2007.08.24 -
VBA32 3.12.2.3 2007.08.23 -
VirusBuster 4.3.26:9 2007.08.23 -
Webwasher-Gateway 6.0.1 2007.08.24 Trojan.Crypt.XPACK.Gen

显示全部楼层 · 发表于 2007-8-24 16:24:43

E:\1.png

显示全部楼层 · 发表于 2007-8-24 16:30:17

病毒: Backdoor.Win32.Small.pt
文件: 623[1].zip
目录: C:\fslrdr\1\S-1-5-21-602162358-1482476501-1177238915-500\[_B_]CACHE[_E_]\Content.IE5\I0GU558Q
进程: Maxthon.exe

显示全部楼层 · 发表于 2007-8-24 16:36:14

fs pass

[病毒样本] A97D0E

本帖子中包含更多资源

本帖子中包含更多资源