优盘带来的，卡巴不认，nod32怀疑win32/hipgon特洛伊木马变种，麻烦帮测一下。

shmily1147

优盘带来的，卡巴不认，nod32怀疑win32/hipgon特洛伊木马变种，麻烦帮测一下。

[ 本帖最后由 shmily1147 于 2008-4-27 12:24 编辑 ]

loveyuwei

样本呢？

醉一生爱妍

高启发kill

2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:50 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:49 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:49 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:46 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:45 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:45 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:45 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:43 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:43 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:42 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:42 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:42 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:34 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:30 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:24 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Invader C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:23 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:18 已检测到: Heur.Backdoor.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:18 已检测到: Heur.Worm.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:17 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:17 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:17 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe  
2000-4-27 12:50:17 未清除: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe 已延期
2000-4-27 12:50:17 已检测到: Heur.Trojan.Generic C:\Documents and Settings\Administrator\桌面\gk123.exe

[ 本帖最后由 garyyan456 于 2008-4-27 12:51 编辑 ]

Starting the file scan:

Begin scan in 'E:\AV\gk123.exe'
E:\AV\gk123.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [NOTE]      The file was deleted!

shmily1147

不好意思，刚才忘传了。补上。分卷压缩的。

aerbeisi

[Found backdoor]         <W32/Hupigon.C.gen!Eldorado (not disinfectable, generic)>        C:\test\gk123.exe

shmily1147

谢谢！
一同事从上海带来的。
4楼大哥的Avira与小弟的nod32结果一样。
我的kav8.0没查出来。

Palkia

[:1:]

hign

挪威的冬天

金山毒霸 0

不过主防干掉了

风险程序        2008-04-27  14:08:49        恶意行为拦截发现可疑文件D:\Sandbox\VirusTest\drive\C\Program Files\Common Files\Microsoft Shared\MSINFO\gk123.exe 高威胁恶意文件 处理成功(操作：您已成功清除该可疑文件)                       

风险程序        2008-04-27  14:08:42        恶意行为拦截发现可疑文件D:\Desktop\gk123\gk123.exe 高威胁恶意文件 处理成功(操作：您已成功清除该可疑文件)



[ 本帖最后由 挪威的冬天 于 2008-4-27 14:10 编辑 ]