Hupigon

Misakrina

小红伞 杀
卡巴过。。被主动防御拦截。。
password:infected

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\huashenke'
C:\Documents and Settings\Administrator\My Documents\huashenke\
  huashenke.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!

zzh161

小红伞：
Begin scan in 'D:\检测\huashenke.exe'
D:\检测\huashenke.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was moved to '4637937e.qua'!
费尔：

Misakrina

这个自解压缩exe捆绑了1楼的病毒
小红伞居然查不出来。。。

Misakrina

附件: [样本。] 解决xp过于精简Anti_nLite.rar
nod32也查不出了。。

hsjj2005

费尔

mofunzone

原帖由 Misakrina 于 2007-2-16 21:35 发表
这个自解压缩exe捆绑了1楼的病毒
小红伞居然查不出来。。。

只能说加壳的问题
反正真正内部的这个病毒已经可以杀出了，这个dropper也就废了。。
anyway，还是上报了样本
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
207473         解决xp过于精简Anti_nLit...te.exe         517.120         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
解决xp过于精简Anti_nLit...te.exe         UNDER ANALYSIS


The file '解决xp过于精简Anti_nLite.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

风野胤

nod搞定

风野胤

原帖由 Misakrina 于 2007-2-17 13:40 发表
附件:  解决xp过于精简Anti_nLite.rar
nod32也查不出了。。

没有用的 解压之后还是报

风野胤

原帖由 mofunzone 于 2007-2-17 14:26 发表

只能说加壳的问题
反正真正内部的这个病毒已经可以杀出了，这个dropper也就废了。。
anyway，还是上报了样本
Thank you for your submission. Below you can see the current status of the uploaded file ...

的确 已经能够认出 再伪装运行还是会露马脚 没用的