同学机器上邪恶的flash游戏

显示全部楼层 · 发表于 2008-7-18 12:36:30

Backdoor.Win32.Hupigon.cvcf
同学机器上邪恶的flash游戏，开始过卡巴，上报后有回应：
Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help
可怎么看都看不出有问题，帮忙分析一下，谢谢啦

显示全部楼层 · 发表于 2008-7-18 12:44:04

UG KPS 引擎砍

显示全部楼层 · 发表于 2008-7-18 12:54:29

Begin scan in 'C:\Documents and Settings\Administrator\桌面\005'
C:\Documents and Settings\Administrator\桌面\005\005.exe
[DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
[NOTE]    A backup was created as '48b5221d.qua'  ( QUARANTINE )
[NOTE]    Attempting to perform action using the ARK lib.
[NOTE]    A backup was created as '4a021616.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-7-18 13:02:14

to lab

显示全部楼层 · 发表于 2008-7-18 13:56:57

这家伙也太肥了点

显示全部楼层 · 发表于 2008-7-18 15:42:32

费尔侦测到 WEIBind.Creation

显示全部楼层 · 发表于 2008-7-18 17:15:26

显示全部楼层 · 发表于 2008-7-18 17:20:29

Antivirus Version Last Update Result
AhnLab-V3 2008.7.17.0 2008.07.18 -
AntiVir 7.8.0.68 2008.07.18 DR/MicroJoiner.Gen
Authentium 5.1.0.4 2008.07.18 W32/Trojan-Gypikon-based.NC!Maximus
Avast 4.8.1195.0 2008.07.18 Win32:Agent-AAAJ
AVG 8.0.0.130 2008.07.18 Dropper.Small.X
BitDefender 7.2 2008.07.18 Trojan.Dropper.Multijoiner.AB
CAT-QuickHeal 9.50 2008.07.17 -
ClamAV 0.93.1 2008.07.18 -
DrWeb 4.44.0.09170 2008.07.18 -
eSafe 7.0.17.0 2008.07.17 -
eTrust-Vet 31.6.5965 2008.07.18 -
Ewido 4.0 2008.07.17 -
F-Prot 4.4.4.56 2008.07.18 W32/Trojan-Gypikon-based.NC!Maximus
F-Secure 7.60.13501.0 2008.07.18 Suspicious:W32/Malware!Gemini
Fortinet 3.14.0.0 2008.07.18 Dropper.C
GData 2.0.7306.1023 2008.07.18 Backdoor.Win32.Hupigon.cvcf
Ikarus T3.1.1.34.0 2008.07.18 Trojan-Dropper.Win32.MultiJoiner.13.B
Kaspersky 7.0.0.125 2008.07.18 Backdoor.Win32.Hupigon.cvcf
McAfee 5341 2008.07.18 -
Microsoft 1.3704 2008.07.18 -
NOD32v2 3278 2008.07.18 a variant of Win32/TrojanDropper.MultiJoiner.13
Norman 5.80.02 2008.07.17 -
Panda 9.0.0.4 2008.07.17 Trj/Multijoiner.A
Prevx1 V2 2008.07.18 -
Rising 20.53.41.00 2008.07.18 -
Sophos 4.31.0 2008.07.18 Mal/Dropper-C
Sunbelt 3.1.1536.1 2008.07.17 -
Symantec 10 2008.07.18 -
TheHacker 6.2.96.381 2008.07.16 -
TrendMicro 8.700.0.1004 2008.07.18 Mal_Banker
VBA32 3.12.8.0 2008.07.17 TrojanDropper.Win32.MultiJoiner.13.b
VirusBuster 4.5.11.0 2008.07.17 -
Webwasher-Gateway 6.6.2 2008.07.18 Trojan.Dropper.MicroJoiner.Gen

显示全部楼层 · 发表于 2008-7-18 17:30:54

微点拦截

显示全部楼层 · 发表于 2008-7-18 20:38:59

已经上报给McAfee

[病毒样本] 同学机器上邪恶的flash游戏

本帖子中包含更多资源

Norman Virus Control 5.99

本帖子中包含更多资源

本帖子中包含更多资源