x13,KIS=7

IllusionWing

UG (With KPS): 11
UG (Without KPS): 7

检测到：木马程序 Backdoor.Win32.Hupigon.bmpl 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\1[1].exe//PE_Patch.UPX//UPX
检测到：木马程序 Rootkit.Win32.KernelBot.ch 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\Beep.sys
检测到：木马程序 Backdoor.Win32.Ceckno.bia 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\cIzG006qwt.exe
检测到：病毒 IM-Worm.Win32.Sohanad.t 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\SSVICHOSST.exe//script.au3
检测到：木马程序 Backdoor.Win32.Hupigon.desp 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\wdfmgr.ra-
检测到：木马程序 Trojan.Win32.Comeli.m 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\WINscvhost.exe.EXE//ASPack
检测到：木马程序 Trojan.Win32.Comeli.m 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\ZCscvhost.exe.EXE//data0000//ASPack

zwl2828

C:\Users\Wesley\Downloads\新建文件夹\1[1].exe - probably a variant of Win32/Hupigon trojan
C:\Users\Wesley\Downloads\新建文件夹\cIzG006qwt.exe - a variant of Win32/DoS.Sypak trojan
C:\Users\Wesley\Downloads\新建文件夹\SSVICHOSST.exe » AUTOIT » script.au3 - Win32/Sohanad worm
C:\Users\Wesley\Downloads\新建文件夹\KIS7无视\kav32.exe - probably a variant of Win32/Genetik trojan
C:\Users\Wesley\Downloads\新建文件夹\KIS7无视\scvhost.exe.EXE - probably unknown NewHeur_PE virus

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹'
C:\Documents and Settings\Administrator\桌面\新建文件夹\1[1].exe
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\cIzG006qwt.exe
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\SSVICHOSST.exe
    [DETECTION] Contains recognition pattern of the W32/Sohanad.R Windows virus
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\wdfmgr.ra-
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\WINscvhost.exe.EXE
    [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\ZCscvhost.exe.EXE
    [0] Archive type: OVL
    --> Object
      [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\KIS7无视\kav32.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\KIS7无视\schrars.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\新建文件夹\KIS7无视\scvhost.exe.EXE
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
    [NOTE]      The file was deleted!

File ID	Filename	Size (Byte)	Result
25110789	Beep.sys	63 KB	UNDER ANALYSIS
1263422	vv1dap32.sys	36 KB	MALWARE
25110790	Windows_NT_ck.EXE	43 KB	UNDER ANALYSIS
25110791	wsock32.dll	17 KB	UNDER ANALYSIS

[ 本帖最后由 nosferatu 于 2008-8-11 15:15 编辑 ]

sltgr

2008/8/11 15:17:34        已删除: Backdoor.Win32.Hupigon.bmpl        C:\Users\AXO\Downloads\新建文件夹\1[1].exe               
2008/8/11 15:17:38        已删除: Rootkit.Win32.KernelBot.ch        C:\Users\AXO\Downloads\新建文件夹\Beep.sys               
2008/8/11 15:17:38        已删除: Backdoor.Win32.Ceckno.bia        C:\Users\AXO\Downloads\新建文件夹\cIzG006qwt.exe               
2008/8/11 15:17:41        已删除: Heur.AntiAV        C:\Users\AXO\Downloads\新建文件夹\KIS7无视\kav32.exe               
2008/8/11 15:17:41        已删除: IM-Worm.Win32.Sohanad.t        C:\Users\AXO\Downloads\新建文件夹\ssvichosst.exe               
2008/8/11 15:17:41        已删除: Backdoor.Win32.Hupigon.desp        C:\Users\AXO\Downloads\新建文件夹\wdfmgr.ra-               
2008/8/11 15:17:42        已删除: Trojan.Win32.Comeli.m        C:\Users\AXO\Downloads\新建文件夹\winscvhost.exe.exe               
2008/8/11 15:17:42        已删除: Trojan.Win32.Comeli.m        C:\Users\AXO\Downloads\新建文件夹\zcscvhost.exe.exe

kkgh

费尔10个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Gpigeon2007.axz
病毒： Hack.DDoSer.Win32.Agent.ar
病毒： Backdoor.Win32.Gpigeon2007.btf
病毒： Packer.Win32.Agent.e     

用户来源：互联网

软件版本：20.57.01

Palkia

金山杀不完

luxiao200888

KS也遇ＢＵＧ？

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Gpigeon2007.axz
病毒： Hack.DDoSer.Win32.Agent.ar
病毒： Packer.Win32.Agent.e     
病毒： Trojan.DL.Win32.Mnless.ata
病毒： Backdoor.Win32.Gpigeon2007.btf

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.57.02