1x TR 1x Hupigon

幸福的猪猪

又是换汤不换药的病毒样本【p.s.目前只针对kaba做免杀】



另外一个是捆绑Hupigon的病毒样本！

文件 HB_BWMeter2.60.rar 接收于 2009.03.03 09:10:54 (CET)
当前状态: 正在读取 ... 队列中 等待中 扫描中 完成 未发现 停止

结果: 28/39 (71.8%)

Email:

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.0.0.101	2009.03.03	Virus.Win32.Hupigon.EA!IK
AhnLab-V3	5.0.0.2	2009.02.27	Win32/ExprPacked.suspicious
AntiVir	7.9.0.98	2009.03.03	TR/Dropper.Gen
Authentium	5.1.0.4	2009.03.03	W32/Heuristic-210!Eldorado
Avast	4.8.1335.0	2009.03.02	Win32:Hupigon-MBH
AVG	8.0.0.237	2009.03.03	BackDoor.Hupigon4.BHFK
BitDefender	7.2	2009.03.03	Packer.Expressor.B
CAT-QuickHeal	10.00	2009.03.03	(Suspicious) - DNAScan
ClamAV	0.94.1	2009.03.03	Trojan.Delf-1066
Comodo	1017	2009.03.03	-
DrWeb	4.44.0.09170	2009.03.03	BackDoor.Pigeon.12932
eSafe	7.0.17.0	2009.03.02	Suspicious File
eTrust-Vet	31.6.6381	2009.03.03	-
F-Prot	4.4.4.56	2009.03.02	W32/Heuristic-210!Eldorado
F-Secure	8.0.14470.0	2009.03.03	W32/Packed_PeSpin.A
Fortinet	3.117.0.0	2009.03.03	PossibleThreat
GData	19	2009.03.03	Packer.Expressor.B
Ikarus	T3.1.1.45.0	2009.03.03	Backdoor.Win32.Hupigon
K7AntiVirus	7.10.654	2009.03.02	-
Kaspersky	7.0.0.125	2009.03.03	-
McAfee	5541	2009.03.02	New Malware.dq
McAfee+Artemis	5541	2009.03.02	New Malware.dq
Microsoft	1.4306	2009.03.03	VirTool:Win32/DelfInject.gen!X
NOD32	3902	2009.03.02	probably a variant of Win32/Agent
Norman	6.00.06	2009.03.02	Hupigon.gen83
nProtect	2009.1.8.0	2009.03.03	-
Panda	10.0.0.10	2009.03.02	-
PCTools	4.4.2.0	2009.03.02	Packed/PeSpin
Prevx1	V2	2009.03.03	-
Rising	21.19.11.00	2009.03.03	Backdoor.Win32.Gpigeon2008.avr
SecureWeb-Gateway	6.7.6	2009.03.03	Trojan.Dropper.Gen
Sophos	4.39.0	2009.03.03	Mal/Behav-043
Sunbelt	3.2.1858.2	2009.03.02	Trojan.Win32.Packed.gen (v)
Symantec	10	2009.03.03	-
TheHacker	6.3.2.6.269	2009.03.02	-
TrendMicro	8.700.0.1004	2009.03.03	-
VBA32	3.12.10.1	2009.03.03	Backdoor.Win32.Hupigon.bmfk
ViRobot	2009.3.3.1631	2009.03.03	-
VirusBuster	4.5.11.0	2009.03.02	Packed/PeSpin

附加信息

File size: 692911 bytes

MD5...: 0f2116e438e96e7102f70f55231b78f2

SHA1..: 51caf2dbd8b9863ace3b47df6ba8249cd39f9641

SHA256: de09b50a0daae82812372baae2a0d0583dbdc391132418835bfbf2b5fc6c66d9

SHA512: 696f5fb6a076b366e853711b8e90b9367d6a301574819e9391eed13f692f97c8 c87bc96e32d9670013d9d00ddac9e5e3627807825bf186cc0052eae950f1f223

ssdeep: 12288:GtaIlVWxcfMrrYRvMvKwC7VUZqq1uyBcpGR9E57YzfpGc2kW7cxww:k8xc fnRaK1SYq1rRm+pUkW2ww

PEiD..: -

TrID..: File type identification RAR Archive (83.3%) REALbasic Project (16.6%)

PEInfo: -

packers (Kaspersky): Expressor, ASPack, PESpin

packers (F-Prot): CAB, RAR, Troj-Crypt.E

packers (Authentium): Expr

[ 本帖最后由 幸福的猪猪 于 2009-3-3 16:31 编辑 ]

ledled

名称: Backdoor.Hupigon.GTB
类型: Virus

描述:


文件:
c:\users\administrator\desktop\hb_bwmeter2.60\hb_bwmeter2.60\hb-bwmeter.exe

名称: Packed/PeSpin
类型: Sequence

描述:


文件:
c:\users\administrator\desktop\hb_bwmeter2.60\hb_bwmeter2.60\hb-bwmeter.exe

kingmuro

过咖啡8.7i

黑衣~魂

DR.WEB
HB-BWMeter.exe -- infected with Trojan.MulDrop.28015
2.exe\5.exe -- Probably DLOADER.Trojan

The EQs

nod32 miss的那个下次升级会增加特征码，话说这类病毒还真无聊

liu5678

NIS又直接无视这个病毒的存在。
哎。

Palkia

Backdoor.Win32.Gpigeon2008.avr rs

尤金卡巴斯基

2009/3/3 23:01:44        已清除        木马程序 Trojan.Win32.Agent.bszq        G:\Temp\Virus\2.rar/2\2.exe/5.exe               
2009/3/3 23:01:27        已删除        木马程序 Backdoor.Win32.Hupigon.ggbh        G:\Temp\Virus\HB_BWMeter2.60\HB_BWMeter2.60\HB_BWMeter2.60\HB-BWMeter.exe//Expressor//data0000.cab/HB_BWM~1.EXE/wbx.exe

xxl

KIS8.0 Kill
2009-3-3 23:22:17        http://bbs.kafan.cn/attachment.p ... 3687//2/2.exe/5.exe        Internet Explorer        检测到威胁: Trojan.Win32.Agent.bszq

leonfg

C:\Documents and Settings\GUNDAM\桌面\2.rar » RAR » 2\2.exe » RAR » 5.exe - Win32/Dialer.NGW trojan
C:\Documents and Settings\GUNDAM\桌面\HB-BWMeter.exe » CAB » HB_BWM~1.EXE » RAR » HB-BWMeter.exe - probably a variant of Win32/Agent trojan