[MD5:2C5D9F]鸽子

qianwenxiang

[2C5D9F]

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\082704\12.exe'
F:\病毒样本\082704\12.exe
  [0] Archive type: ZIP SFX (self extracting)
  --> 5.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

wangjay1980

2007-8-27 JAY21:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\12.exe/6.bat        ok        scanned
2007-8-27 JAY21:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\12.exe/1.vbs        ok        scanned
2007-8-27 JAY21:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\12.exe/5.exe        packed file PE_Patch       
2007-8-27 JAY21:36:18        File: C:\Documents and Settings\Owner\×ÀÃæ\12.exe/5.exe//PE_Patch        ok        scanned
2007-8-27 JAY21:36:23        File: C:\Documents and Settings\Owner\×ÀÃæ\12.exe/5.exe        ok        scanned

gho

卡巴，咖啡挂

微点卫士

微点：
程序:
C:\WINDOWS.0\TEMP\5.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\12345.EXE
2) C:\WINDOWS.0\UNINSTAL.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\TEMP\5.EXE
2) C:\WINDOWS.0\12345.EXE
是否删除木马程序及其衍生物?
程序:
C:\WINDOWS.0\TEMP\5.EXE
1) C:\WINDOWS.0\UNINSTAL.BAT
是否删除可疑程序?

我先运行5。EXE的

hj5abc

改时间 ..

Love=卡巴+费尔

NIS2007

ssy275

Result: 1 malware found
Backdoor.Win32.Hupigon.gdt (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082704.part1.rar

FBAV

Vita！的确是挂了

taihuxian

Malicious code found in file C:\WINDOWS\Temp\5.exe.
Infection: Backdoor.Win32.Hupigon.gdt
Action: The file was quarantined.