再来几个样本

gzg

大家扫扫看

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\新建文件夹 (2)'
C:\Documents and Settings\dell\桌面\新建文件夹 (2)\征途私服登入器.exe
  [0] Archive type: RAR SFX (self extracting)
  --> patch.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> setup.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

saga3721

2007-8-29 12:06 [Guard] Malware found
      Virus or unwanted program 'TR/Dropper.Gen [TR/Dropper.Gen]'
      detected in file 'C:\Documents and Settings\All Users\Application Data\AntiVir
      PersonalEdition Classic\TEMP\AVSCAN-20070829-120632-7CFD619B\AVSCAN-00000003.
      Action performed: Deny access

2007-8-29 12:06 [Scanner] Malware found
      Found a virus or unwanted program 'BDS/Hupigon.Gen' [backdoor]
      in file 'C:\Documents and Settings\X\桌面\征途私服登入器.exe'.
      Action taken:
      A backup was created as "c09680e0.qua"  ( QUARANTINE )
      The file was deleted!

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineGames.afc.1 [TR/PSW.OnLineGames.afc.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVDHMON.DAT.
      Action performed: Deny access

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineG.MI.1 [TR/PSW.OnLineG.MI.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVCQMON.DAT.
      Action performed: Deny access

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineGames.afc.1 [TR/PSW.OnLineGames.afc.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVDHMON.DAT.
      Action performed: Deny access

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineGames.afc.1 [TR/PSW.OnLineGames.afc.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVDHMON.DAT.
      Action performed: Deny access

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineG.MI.1 [TR/PSW.OnLineG.MI.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVCQMON.DAT.
      Action performed: Deny access

2007-8-29 12:05 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineG.MI.1 [TR/PSW.OnLineG.MI.1]'
      detected in file 'C:\Documents and Settings\X\桌面\RAVCQMON.DAT.
      Action performed: Deny access

tiedan2

Ikarus:
29:08:2007 12:07:14 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]
Directory scanned(filestreams): C:\Documents and Settings\zhenjia\桌面\征途登入器[1]
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\DHDINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\KKKKKKKKK
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\MYDINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\RAVCQMON.DAT - SIGNATURE FOUND "Trojan-PWS.Win32.Small.br"
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\RAVDHMON.DAT - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\WDCINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\WLFINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\XYHINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\XYIPRI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\ZXGINI.DLL
File scanned: C:\Documents and Settings\zhenjia\桌面\征途登入器[1]\征途私服登入器.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
29:08:2007 12:07:15 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 11
Virus found: 3
----------------------------------------------------

红心王子

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.afc        文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\RAVDHMON.DAT/UPack
已删除: 木马程序 Trojan.Win32.Pakes.ch        文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\征途私服登入器.exe/data.rar\patch.exe/PE_Patch/UPack
已删除: 木马程序 Backdoor.Win32.Hupigon.heu        文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\征途私服登入器.exe/data.rar\setup.exe/ASPack

hj5abc

解压卡死..

风野胤

解压关imon是王道

solcroft

既然都下载到电脑了，和IMON没关系了吧？

yashoo

已删除: 木马程序 Trojan.Win32.Pakes.ch        文件: E:\test\征途登入器\征途私服登入器.exe//data.rar/patch.exe//PE_Patch//UPack
已删除: 木马程序 Backdoor.Win32.Hupigon.heu        文件: E:\test\征途登入器\征途私服登入器.exe//data.rar/setup.exe//ASPack

碧水寒潭

Start of the scan: 2007年8月29日  12:55

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\征途登入器[1].part1.rar
  [0] Archive type: RAR
  --> RAVCQMON.DAT
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
  --> RAVDHMON.DAT
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.afc.1
      [INFO]      The file was deleted!


End of the scan: 2007年8月29日  12:55
Used time: 00:19 min

The scan has been done completely.

      1 Scanning directories
     12 Files were scanned
      2 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     10 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found