怪异的鸽子，微软报【MD5: 719C56】

promised

微软都报，卡巴6挂了

[ 本帖最后由 promised 于 2007-6-6 15:16 编辑 ]

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\123.rar'
C:\Documents and Settings\Administrator\My Documents\
  123.rar
    [0] Archive type: RAR
    --> 123.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

kp2006

卡吧7没挂 启发报

Kaspersky Anti-Virus 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=82891 is infected with Trojan.Generic virus

The EQs

Scan performed at: 2007-6-6 15:17:18
Scanning Log
NOD32 version 2312 (20070606) NT
Command line: C:\Documents and Settings\EQ2\桌面\123.rar
Operating memory - is OK

Date: 6.6.2007  Time: 15:17:22
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\123.rar
C:\Documents and Settings\EQ2\桌面\123.rar ?RAR ?123.exe - a variant of Win32/Hupigon trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 15:17:22 Total scanning time: 0 sec (00:00:00)

The EQs

鸽子加了什么壳？？？

wangjay1980

VPacker//PE_Patch.MaskPE

scottxzt

直接就生成EXE了，微点报未知间谍。红伞墨认PASS

The EQs

其实用卡巴看壳还是挺方便的。。。不过带壳入库就看不出来了

foxhound

A-Squared	Found nothing
AntiVir	Found HEUR/Crypted
ArcaVir	Found nothing
Avast	Found Win32:QQRob-AS
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found W95/Fono
Kaspersky Anti-Virus	Found nothing
NOD32	Found a variant of Win32/Hupigon
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found MalwareScope.Backdoor.Hupigon.3

确实很怪~~~~

solcroft