5

sam.to

已刪除: 病毒 Worm.Win32.AutoRun.dji        檔案: C:\Documents and Settings\kato9096\桌面\5.rar/5\MSDOS.bat2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.axbr        檔案: C:\Documents and Settings\kato9096\桌面\5.rar/5\setup123.exe2

Worm.Win32.AutoRun.dji是新的
http://www.kaspersky.com/viruswa ... 0&hour_offset=4
Backdoor.Win32.Hupigon.axbr是旧的
http://www.kaspersky.com/viruswa ... 1&hour_offset=4
上报卡巴

Hello,

Hello,

svchost.exe_, winsys.exe_, winsys.sys2

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-18 14:27 编辑 ]

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\5'
E:\新建文件夹 (2)\5\5\MSDOS.bat2
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!
E:\新建文件夹 (2)\5\5\setup123.exe2
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [NOTE]      The file was deleted!

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Gpigeon2007.lpm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.40.22

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\5.part1.rar<RAR>:setup123.exe2 <- Trojan.Hupigon.Cda : No action



Scanned objects : 7

Infected objects : 1

挪威的冬天

金山

病毒        2008-04-16  21:20:21        病毒在文件D:\Desktop\5\5\5\winsys.exe2中        Win32.Troj.Agent.45056        处理成功（操作：删除）       
病毒        2008-04-16  21:20:21        病毒在文件D:\Desktop\5\5\5\setup123.exe2中        Win32.Troj.HuigeziT.wy.761344        处理成功（操作：删除）

The EQs

C:\Documents and Settings\Don johnson\桌面\5\5\5\setup123.exe2 - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\5\5\5\winsys.exe2 - Win32/Agent.NSY trojan
C:\Documents and Settings\Don johnson\桌面\5\5\5\winsys.sys2 - Win32/Agent.NSY trojan

sam.to

Hello,

svchost.exe_, winsys.exe_, winsys.sys2

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-18 14:27 编辑 ]

3820770  svchost.exe2  711.69 KB  UNDER ANALYSIS
3816490  winsys.exe2  44 KB  CLEAN
3807861  winsys.sys2  20.63 KB  CLEAN