一后门[535752]

promised

[ 本帖最后由 promised 于 2007-11-2 21:03 编辑 ]

Nerazzurri

Hello,

b.exe - Backdoor.Win32.PcClient.ahs

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: b.rar

[ 本帖最后由 Kav6.0 于 2007-11-2 21:35 编辑 ]

无敌敏敏

Starting the file scan:

Begin scan in 'E:\b.rar'
E:\b.rar
  [0] Archive type: RAR
  --> b.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/WinRem Backdoor server programs
      [INFO]      The file was deleted!

promised

C:\ABC\b.rar:\b.exe - 特征码 'Virus.Win32.Hupigon.BQO' 被发现
[Found possible virus] < (not disinfectable)>         C:\ABC\b\b.exe->(Aspack)->(Aspack)

qigang

RX20.16.42不杀，

xiaopangmd

ENA Pass

清凉世界

a-squared	3.0.0.126	2007.11.01	2007-11-01	-	3.169
AntiVir	7.6.0.30	7.0.0.164	2007-11-02	BDS/WinRem	4.498
Arcavir	1.0.4	200711020959	2007-11-02	-	2.565
AVAST	1.0.8	071102-0	2007-11-02	Win32:Hupigon-BQO [Trj]	3.067
AVG	7.5.49.442	269.15.14/1100	2007-10-30	-	4.976
BitDefender	7.60825.937430	7.15628	2007-11-02	-	8.831
CA (VET)	8.4.0.24	31.2.5262	2007-11-02	-	1.228
ClamAV	0.91.2	4659	2007-11-02	-	0.156
Comodo	2.11	2.0.0.332	2007-11-02	-	1.026
Dr.WEB	4.33	2007.11.02	2007-11-02	-	8.987
ewido	4.0.0.2	2007.11.01	2007-11-01	-	2.225
F-PROT	4.4.0.50	20071031	2007-10-31	Possible W32/Heuristic-162!Eldorado (not disinfectable)	1.341
F-SECURE	5.51.6100	2007.11.02.02	2007-11-02	-	0.136
IKARUS	T3.1.1.12	2007.11.02.69754	2007-11-02	-	0.276
MKS_VIR	2.01	2007.11.02	2007-11-02	Win32.4	6.969
NOD32	2.70.10	2633	2007-11-02	-	4.318
NORMAN	5.91.08	5.90	2007-11-01	-	21.507
nProtect	2007-11-02.00	1018520	2007-11-02	-	11.067
Prevx	V2	20071102	2007-11-02	-	14.235
QuickHeal	9.00	2007.11.02	2007-11-02	-	2.641
SOPHOS	2.49.1	4.21	2007-11-02	-	9.826
The Hacker	6.2.9	v00110	2007-10-26	-	0.652
VBA32	3.12.2.4	20071102.0521	2007-11-02	-	1.568
ViRobot	20071102	2007.11.02	2007-11-02	-	0.626
VirusBuster	4.3.19:9	9.113.8/11.0	2007-11-01	-	1.915
卡巴斯基	5.5.10	2007.11.02	2007-11-02	-	11.524
安博士V3	2007.11.02.01	2007.11.02	2007-11-02	-	1.185
江民杀毒	10.00.650	2007.11.01	2007-11-01	-	1.256
熊猫卫士	9.04.03.0001	2007.11.01	2007-11-01	Suspicious file	3.368
瑞星	19.0	20.16.42.00	2007-11-02	-	2.810
赛门铁克	1.3.0.24	20071101.016	2007-11-01	-	0.280
趋势	8.500-1001	4.810.06	2007-11-02	-	0.301
迈克菲	5.2.00	5154	2007-11-01	-	4.733
金山毒霸	2007.6.20.249	2007.11.2	2007-11-02	-	1.121
飞塔	2.81-3.11	8.313	2007-11-02	-	0.530

wangjay1980

detected: Trojan program Backdoor.Win32.PcClient.bal File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\b.rar/b.exe//#//PE_Patch.MaskPE//PE_Patch.MaskPE

kp2006

风险程序        2007-11-03  00:44:25        行为监控发现可疑文件D:\Documents and Settings\Administrator.25374E8C0BE6478\桌面\b\b.exe        一般恶意文件        处理成功(操作：您已成功清除该可疑文件)

scottxzt

Object: b.exe
        In archive: C:\Documents and Settings\dell\桌面\b.rar
        Status: Virus detected
        Virus: Backdoor.Win32.PcClient.ahs (Engine A)