[病毒样本] 1

显示全部楼层 · 发表于 2008-9-26 15:07:08

2008-9-26 15:04:28 网页 http://bbs.kafan.cn/attachment.p ... //Camfrog_oem.exe// PE_Patch.MaskPE Firefox 检测到: Suspicious.Packer

显示全部楼层 · 发表于 2008-9-26 15:11:15

Begin scan in 'D:\Camfrog_oem.rar'
D:\Camfrog_oem.rar
[0] Archive type: RAR
--> Camfrog_oem.exe
   [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    A backup was created as '494984a5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-9-26 15:17:03

微点拦截

显示全部楼层 · 发表于 2008-9-26 15:18:33

扫描统计:
扫描时间: 4秒
扫描选项:
扫描目标: D:\Virus\Camfrog_oem.rar
计数:
  扫描的项目总数: 3
  - 文件和目录: 3
  - 注册表条目: 0
  - 进程和启动项目: 0
  - 网络和浏览器项目: 0
  - 其他: 0
  - 受信任文件: 0
  - 跳过的文件: 0

  检测到的安全风险总数: 2
  已解决的项目总数: 2
  需要注意的项目总数: 0

已解决的威胁数:
压缩文件“camfrog_oem.rar”中存在风险
类型: 已压缩
风险: 高 (高隐蔽性，高清除，高性能，高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
2 文件
d:\virus\camfrog_oem.rar - 已删除

显示全部楼层 · 发表于 2008-9-26 17:25:10

File:	Camfrog_oem.exe
Status:	INFECTED/MALWARE
MD5:	5d9652ef6de54a7b30c7e040ce5a9b7b
Packers detected:	PE_PATCH.MASKPE

Scanner results
Scan taken on 26 Sep 2008 09:23:16 (GMT)
A-Squared	Found nothing
AntiVir	Found BDS/Hupigon.Gen
ArcaVir	Found nothing
Avast	Found Win32:Hupigon-MDE
AVG Antivirus	Found Win32/PEMask
BitDefender	Found BehavesLike:Win32.ExplorerHijack (probable variant)
ClamAV	Found Trojan.Crypted-4
CPsecure	Found Troj.GameThief.W32.OnLineGames.tcdi
Dr.Web	Found BackDoor.Pigeon.origin
F-Prot Antivirus	Found W32/Downloader.C.gen!Eldorado
F-Secure Anti-Virus	Found nothing
G DATA	Found nothing
Ikarus	Found Virus.Win32.Hupigon.AMD
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably a variant of Win32/GreyBird (probable variant)
Norman Virus Control	Found Hupigon.gen114
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-058
VirusBuster	Found nothing
VBA32	Found MalwareScope.Trojan-PSW.Game.16 (probable variant)

显示全部楼层 · 发表于 2008-9-26 19:07:06

Camfrog_oem.exed - Backdoor.Win32.Hupigon.eccc,
qq.exed - Backdoor.Win32.Hupigon.eccd

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support

显示全部楼层 · 发表于 2008-9-26 19:17:33

鸽子啊

显示全部楼层 · 发表于 2008-9-26 19:26:19

2008-9-26 19:25:12 检测到威胁: Suspicious.Packer D:\My Documents\桌面\Camfrog_oem.rar/Camfrog_oem.exe/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE
2008-9-26 19:25:12 未处理: Suspicious.Packer D:\My Documents\桌面\Camfrog_oem.rar/Camfrog_oem.exe/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE 延期
2008-9-26 19:25:12 检测到威胁: Suspicious.Packer D:\My Documents\桌面\Camfrog_oem.rar/Camfrog_oem.exe/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE
2008-9-26 19:25:12 未处理: Suspicious.Packer D:\My Documents\桌面\Camfrog_oem.rar/Camfrog_oem.exe/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE/PE_Patch.MaskPE 由用户跳过

显示全部楼层 · 发表于 2008-9-26 20:03:50

McAfee New Poly Win32

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

kis2009