毒4个[35d745 82a877 632c7d 9d538c]

troika

已上报KB

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Downloads'
C:\Documents and Settings\Administrator\My Documents\Downloads\
  gezi.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.PV.11 Backdoor server programs
      [WARNING]   The file was ignored!
  system.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [WARNING]   The file was ignored!
  三钻会员教程.exe
      [DETECTION] Is the Trojan horse TR/PSW.51990
      [WARNING]   The file was ignored!
  劲舞MB刷分外挂3.0破解版.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.bm.1 Backdoor server programs
      [WARNING]   The file was ignored!


End of the scan: 2007年6月7日  21:27
Used time: 00:07 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      4 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      4 Warnings
      0 Notes
      0 Hidden objects were found
扫描日志
NOD32版本 2315 (20070607) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\Downloads
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 7.6.2007  时间：21:27:42
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\Downloads\
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\gezi.exe - Win32/Hupigon 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\system.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\三钻会员教程.exe - 可能是 Win32/PSW.QQShou  ?
?木马 的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\劲舞MB刷分外挂3.0破解版.exe - Win32/Hupigon 木马
已扫描的文件数目：4
已发现的病毒数目：3
完成时间： 21:28:20 总扫描时间：38 秒 (00:00:38)

[Scan path] C:\Documents and Settings\Administrator\My Documents\Downloads
C:\Documents and Settings\Administrator\My Documents\Downloads\gezi.exe infected with BackDoor.Pigeon.128
>>C:\Documents and Settings\Administrator\My Documents\Downloads\system.exe infected with BackDoor.Pigeon.origin
>C:\Documents and Settings\Administrator\My Documents\Downloads\三钻会员教程.exe infected with Trojan.PWS.Wow
C:\Documents and Settings\Administrator\My Documents\Downloads\劲舞MB刷分外挂3.0破解版.exe infected with BackDoor.Pigeon.128

wangjay1980

怎么也扫描一下在上报吧

detected: Trojan program Backdoor.Win32.Hupigon.dsx        File: E:\Ñù±¾\bingdu\gezi.exe
detected: Trojan program Backdoor.Win32.Hupigon.dsx        File: E:\Ñù±¾\bingdu\¾¢ÎèMBË¢·ÖÍâ¹Ò3.0Æƽâ°æ.exe

nod
2007-6-8 12:30:04  F:\virus\毒4个[35d745 82a877 632c7d 9d538c]\三钻会员教程.exe   可能是 Win32/PSW.QQShou 木马 变种
       
2007-6-8 12:30:02  F:\virus\毒4个[35d745 82a877 632c7d 9d538c]\劲舞MB刷分外挂3.0破解版.exe        Win32/Hupigon 木马       

2007-6-8 12:29:54  F:\virus\毒4个[35d745 82a877 632c7d 9d538c]\gezi.exe        Win32/Hupigon 木马       

还有一个漏了

tracydk

红心王子

费尔

wangjay1980

有效率
Hello.

bingdu2.zip/system.exe detected Backdoor.Win32.Hupigon.uh
bingdu2.zip/Lд+·мёL--жжж.exe detected Trojan-PSW.Win32.WOW.qz

Sincerely yours,
Pavel Zelensky
Virus analyst

Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax: +7 (495) 797-8700
E-mail:  newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com


> Attachment: bingdu2.zip

tracydk

卡巴的效率真是好啊

小邪邪

咖啡全杀了

wangjay1980

deleted: Trojan program Backdoor.Win32.Hupigon.uh        File: C:\Documents and Settings\Owner\×ÀÃæ\bingdu2.zip/system.exe//PE_Patch.NSAnti//NSAnti//PE_Patch.MaskPE
deleted: Trojan program Trojan-PSW.Win32.WOW.qz        File: C:\Documents and Settings\Owner\×ÀÃæ\bingdu2.zip/Èý×ê»áÔ±½Ì³Ì.exe//UPX