avast&费尔报鸽子

qianwenxiang

VIEWPASS只有32KB 这么小 难不成是麻雀..

http://www.wex.cn/ip/look.exe

残缺的唯美

detected: Trojan program Backdoor.Win32.Hupigon.rc        URL: http://www.wex.cn/ip/look.exe//ViewPass.exe//PE_Patch

都说是鸽子

lsyer

捆绑的
释放的ip.exe temp.exe有问题

报不报
ViewPass.exe就无所谓了
星号密码察看器而已

SONGBOWEN

RAR自解压……
郁闷……
Path=%SystemRoot%\temp
Setup=ip.exe
setup=ViewPass.exe
Silent=1
Overwrite=1

pmj_sh

检测到病毒: Backdoor.Win32.Hupigon.rc
文件: look[1].exe

检测到病毒: Backdoor.Win32.Hupigon.rc
文件: 桌面[1].rar

a256886572008

這種東西並沒有多大的危害，只會添加幾個殭屍進程(ntvdm.exe)而已

重啟之後，這毒就廢掉了









運行temp.exe，也是出現殭屍進程！

wangjay1980

detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ1.rar/ip.exe
detected: Trojan program Backdoor.Win32.Hupigon.rc        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ1.rar/ViewPass.exe//PE_Patch

samancy

ＥＱ好厉害啊！看来是不用不行了！

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 803
Paranoia Database - 48490
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\桌面

C:\Documents and Settings\Uhthn\Desktop\桌面\ip.exe - Infected TROJAN-DOWNLOADER.QQHELPER.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\桌面\temp.exe - OK
C:\Documents and Settings\Uhthn\Desktop\桌面\ViewPass.exe - Suspected TROJAN-DOWNLOADER (HTTP://...)

3 Files scanned
1 Infected files found
1 Suspected files found
0 Files disinfected
1 Files deleted

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面.rar'
C:\Documents and Settings\Administrator\桌面\桌面.rar
  [0] Archive type: RAR
  --> ip.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ViewPass.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.RC.73 Backdoor server programs
      [INFO]      The file was deleted!