后门一个

z2665

一个后门。质量未知。

中国崛起

小红伞：
The file 'C:\Documents and Settings\……\桌面\Server.rar'
contained a virus or unwanted program 'DR/Delphi.Gen' [dropper]
Action(s) taken:
DR/Delphi.Gen:[HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN]:<Start Page>=sz:baidu.com>=SZ:about:blank.
The file was deleted!

schumi小粉

饿。。。。。
文件 Server.rar 接收于 2008.11.09 06:42:30 (CET)
当前状态: 完成
结果: 14/36 (38.89%)

格式化文本
打印结果

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.11.7.1	2008.11.09	-
AntiVir	7.9.0.26	2008.11.07	DR/Delphi.Gen
Authentium	5.1.0.4	2008.11.08	W32/Hupigon.C.gen!Eldorado
Avast	4.8.1248.0	2008.11.08	-
AVG	8.0.0.161	2008.11.08	BackDoor.Hupigon.3.F
BitDefender	7.2	2008.11.09	Trojan.Delf.POU
CAT-QuickHeal	9.50	2008.11.08	-
ClamAV	0.94.1	2008.11.09	-
DrWeb	4.44.0.09170	2008.11.09	DLOADER.Trojan
eSafe	7.0.17.0	2008.11.06	-
eTrust-Vet	31.6.6199	2008.11.08	-
Ewido	4.0	2008.11.08	-
F-Prot	4.4.4.56	2008.11.08	W32/Hupigon.C.gen!Eldorado
F-Secure	8.0.14332.0	2008.11.09	-
Fortinet	3.117.0.0	2008.11.08	-
GData	19	2008.11.09	Trojan.Delf.POU
Ikarus	T3.1.1.45.0	2008.11.09	Trojan-Dropper.Delf
K7AntiVirus	7.10.520	2008.11.08	-
Kaspersky	7.0.0.125	2008.11.09	Trojan.Win32.Delf.fwo
McAfee	5428	2008.11.08	-
Microsoft	1.4104	2008.11.09	Trojan:Win32/Iniriror.A
NOD32	3597	2008.11.08	-
Norman	5.80.02	2008.11.07	-
Panda	9.0.0.4	2008.11.08	Suspicious file
PCTools	4.4.2.0	2008.11.08	-
Prevx1	V2	2008.11.09	-
Rising	21.02.60.00	2008.11.09	-
SecureWeb-Gateway	6.7.6	2008.11.09	Trojan.Dropper.Delphi.Gen
Sophos	4.35.0	2008.11.08	Mal/DelpDldr-B
Sunbelt	3.1.1785.2	2008.11.08	-
Symantec	10	2008.11.09	-
TheHacker	6.3.1.1.146	2008.11.08	-
TrendMicro	8.700.0.1004	2008.11.07	-
VBA32	3.12.8.9	2008.11.09	suspected of Backdoor.XiaoBird.1 (paranoid heuristics)
ViRobot	2008.11.7.1457	2008.11.07	-
VirusBuster	4.5.11.0	2008.11.08	-

附加信息

File size: 68064 bytes

MD5...: b01f8d4bf75af4fa780853a059c2afc8

SHA1..: 17bcdee0eebf139bd807207e597f4dd7171ef1c3

SHA256: 08fbf8466d4497fea27c24f14b70c2cf58b3425ca564c0bbb498557ff654f746

SHA512: 0816485ea34fcc5988b2ce812a5cfbb736e113aaf0bd563fafb7a18d06e01737 67ed3d826e134a4bbd398c3403b17d87b0ddc553a312052bf55c22e2cb5d8244

PEiD..: -

TrID..: File type identification RAR Archive (83.3%) REALbasic Project (16.6%)

PEInfo: -

江湖的fans

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
395560&k=b87d9862d12e5829481778a681e2dbd
f&t=1226210110

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan.Win32.Delf.fwo


如有疑问，请联系您的技术支持
创建日期：
Sun Nov 09 13:56:46 2008
Kaspersky Lab

尤金卡巴斯基

2008/11/9 13:56:25        已清除        木马程序 Trojan.Win32.Delf.fwo        G:\Temp\Virus\Server.rar/Server.exe//data0000

Palkia

生成

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\CL1uUeQS.dll   
Type: Win32 Executable Generic / Extension: .EXE   
MD5 Hash: E0EA4221048413CA7EF15AD19647E823   

A-squared ----- Trojan-Dropper.Delf!IK    
Avast ----- Nothing   
Avg ----- BackDoor.Hupigon.3.F     
Antivir ----- BDS/Hupigon.Gen    
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- DLOADER.Trojan    
Eset ----- Nothing   
Ikarus ----- Trojan-Dropper.Delf    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan.Win32.Delf.fwo    
Kingsoft ----- Nothing   
Vba32 ----- Nothing   

*** 6/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\Server.exe   
Type: Win32 Executable Borland Delphi 7 / Extension: .EXE   
MD5 Hash: 594D4FFF62516425A460D3451ADF6FC6   

A-squared ----- Trojan-Dropper.Delf!IK    
Avast ----- Nothing   
Avg ----- BackDoor.Hupigon.3.F     
Antivir ----- DR/Delphi.Gen    
BitDefender ----- Trojan.Delf.POU    
ClamWin ----- Nothing   
Dr.Web ----- DLOADER.Trojan    
Eset ----- Nothing   
Ikarus ----- Trojan-Dropper.Delf    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan.Win32.Delf.fwo    
Kingsoft ----- Nothing   
Vba32 ----- Nothing   

*** 7/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   

Task done @ 2008/11/09 日 14:36:50.32   

BING126

McAfee  miss