唯独卡巴不报

显示全部楼层 · 发表于 2008-5-17 02:45:32

AhnLab-V3	2008.5.16.0	2008.05.16	-
AntiVir	7.8.0.19	2008.05.16	BDS/Hupigon.Gen
Authentium	5.1.0.4	2008.05.16	W32/Hupigon.A.gen!Eldorado
Avast	4.8.1195.0	2008.05.14	Win32:Hupigon-YY
AVG	7.5.0.516	2008.05.16	-
BitDefender	7.2	2008.05.16	Backdoor.Hupigon.EKO
CAT-QuickHeal	9.50	2008.05.16	-
ClamAV	0.92.1	2008.05.16	Trojan.Packed-25
DrWeb	4.44.0.09170	2008.05.16	-
eSafe	7.0.15.0	2008.05.16	suspicious Trojan/Worm
eTrust-Vet	31.4.5788	2008.05.14	-
Ewido	4.0	2008.05.14	-
F-Prot	4.4.2.54	2008.05.16	W32/Hupigon.A.gen!Eldorado
F-Secure	6.70.13260.0	2008.05.16	W32/Suspicious_N.gen
Fortinet	3.14.0.0	2008.05.15	-
GData	2.0.7306.1023	2008.05.16	Win32:Hupigon-YY
Ikarus	T3.1.1.26.0	2008.05.16	Backdoor.Pigeon.775
Kaspersky	7.0.0.125	2008.05.16	-
McAfee	5296	2008.05.16	BackDoor-SO
Microsoft	1.3408	2008.05.13	TrojanDropper:Win32/Hupigon.gen!A
NOD32v2	3105	2008.05.16	a variant of Win32/Hupigon
Norman	5.80.02	2008.05.16	W32/Suspicious_N.gen
Panda	9.0.0.4	2008.05.15	-
Prevx1	V2	2008.05.16	-
Rising	20.44.32.00	2008.05.15	Backdoor.Gpigeon.GEN
Sophos	4.29.0	2008.05.16	Mal/Behav-043
Sunbelt	3.0.1114.0	2008.05.12	-
Symantec	10	2008.05.16	-
TheHacker	6.2.92.311	2008.05.15	-
VBA32	3.12.6.6	2008.05.16	Trojan-Spy.Win32.Banker
VirusBuster	4.3.26:9	2008.05.16	Packed/NSPack
Webwasher-Gateway	6.6.2	2008.05.16	Trojan.Backdoor.Hupigon.Gen

显示全部楼层 · 发表于 2008-5-17 02:45:56

附上沙盘报告

http://research.sunbelt-software.com/ViewMalware.aspx?id=4430539

显示全部楼层 · 发表于 2008-5-17 12:14:47

Avk

Win32:Hupigon-YY [Trj] (Avast/BD引擎)

Avira

Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs

显示全部楼层 · 发表于 2008-5-17 13:05:50

C:\Documents and Settings\Administrator\桌面\1.rar>>1.exe Backdoor.Gpigeon.GEN.tssl 后门还未处理

显示全部楼层 · 发表于 2008-5-17 15:09:23

卡巴斯基主动防御太牛B了，鼠标双击这个样本，卡巴斯基7.0马上报未知木马，提示隔离。

检测到：风险软件 Trojan.generic 正在运行的进程　: C:\Documents and Settings\Administrator\桌面\1.exe

显示全部楼层 · 发表于 2008-5-17 15:11:52

病毒 2008-05-17 15:12:17 C:\Documents and Settings\Administrator\桌面\1.rar\1.exe Win32.Hack.Huigezi.cz 清除成功

回5楼

用卡巴2009 PDM的danger index直接给你个威胁100

显示全部楼层 · 发表于 2008-5-17 15:24:11

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\1.rar<RAR>:1.exe <- Trojan.Graybird.Pj : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-17 15:24:43

[Found backdoor] <W32/Hupigon.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\1.rar->1.exe->(NSPack)

---------------------------------------------------------------------
Scan ended: 2008-5-17, 15:24:33
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-17 15:44:32

avast found Win32:Hupigon-YY

显示全部楼层 · 发表于 2008-5-17 17:54:52

to kl

[病毒样本] 唯独卡巴不报

本帖子中包含更多资源

ArcaVir2008

F-Prot 6.0.9.0