幾個比較新的惡意程式 AntiVir全報，kaspersky保持沉默的時候多
endurer 原創
2006-12-16 第1版
線上掃描幾個從網上下載的惡意程式檔案的結果。
檔案說明符 : D:/cl.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 12:58:44
修改時間 : 2006-12-16 12:58:45
訪問時間 : 2006-12-16 13:5:1
大小 : 71168 位元組 69.512 KB
MD5 : c59fa74fe40dddba162fdb2e397a06cd
Complete scanning result of "cl.exe", received in VirusTotal at 12.16.2006, 06:04:27 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSAnti.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 71168 bytes
MD5: c59fa74fe40dddba162fdb2e397a06cd
SHA1: 8caa06fa92179af43aff05f415421146f5c04a14
檔案說明符 : D:/mh.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 12:59:32
修改時間 : 2006-12-16 12:59:32
訪問時間 : 2006-12-16 13:5:1
大小 : 40424 位元組 39.488 KB
MD5 : ef8cb4c5a3ccf1eff20daf7a53efb8b4
Complete scanning result of "mh.exe", received in VirusTotal at 12.16.2006, 06:17:25 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Agent.NBJ |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 40424 bytes
MD5: ef8cb4c5a3ccf1eff20daf7a53efb8b4
SHA1: e45dee7ff8a4ff941f937aee27b0989b1facaecc
檔案說明符 : D:/wl.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 12:59:49
修改時間 : 2006-12-16 12:59:51
訪問時間 : 2006-12-16 13:5:1
大小 : 60929 位元組 59.513 KB
MD5 : 894967e328b50eae5b34bdacf3bb64fb
Complete scanning result of "wl.exe", received in VirusTotal at 12.16.2006, 06:25:07 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSAnti.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 60929 bytes
MD5: 894967e328b50eae5b34bdacf3bb64fb
SHA1: f99c1edb269040ed4b7b7b47f17622d2534186a3
檔案說明符 : D:/zt.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:0:18
修改時間 : 2006-12-16 13:0:18
訪問時間 : 2006-12-16 13:5:1
大小 : 62976 位元組 61.512 KB
MD5 : 299365637265e2cbeea2076ead46732f
Complete scanning result of "zt.exe", received in VirusTotal at 12.16.2006, 07:08:48 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Drop.Delf.DU |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.16.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Bacalid.A |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 62976 bytes
MD5: 299365637265e2cbeea2076ead46732f
SHA1: 22aff5ae13aeef3e812720dbe8767b87468c3cff
檔案說明符 : D:/jh.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:0:41
修改時間 : 2006-12-16 13:0:42
訪問時間 : 2006-12-16 13:5:1
大小 : 83456 位元組 81.512 KB
MD5 : 9762fa3face9e03f32af2ed9af3868bb
瑞星Trojan.PSW.Lineage.mnu
Rising___Trojan.PSW.Lineage.mnu---jh.exe
Complete scanning result of "jh.exe", received in VirusTotal at 12.16.2006, 06:11:07 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/PSW.OnLineGames.DE |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | Dropped:Trojan.PWS.OnLineGames.L |
| CAT-QuickHeal | 8.00 | 12.15.2006 | no virus found |
| ClamAV | devel-20060426 | 12.15.2006 | Trojan.Lineage-129 |
| DrWeb | 4.33 | 12.15.2006 | Trojan.PWS.Lineage |
| eSafe | 7.0.14.0 | 12.14.2006 | no virus found |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | Trojan.Lineage.alw |
| Fortinet | 2.82.0.0 | 12.16.2006 | no virus found |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | Trojan-PSW.Win32.Delf.FZ |
| Kaspersky | 4.0.2.24 | 12.16.2006 | Trojan-PSW.Win32.OnLineGames.de |
| McAfee | 4920 | 12.15.2006 | PWS-Lineage |
| Microsoft | 1.1804 | 12.15.2006 | PWS:Win32/Wowsteal.gen!A |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | W32/Lineage.AOYA |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | no virus found |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Worm.Viking.1 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 83456 bytes
MD5: 9762fa3face9e03f32af2ed9af3868bb
SHA1: 3e66e284410d4323c77eca213882e4a3b01cf603
檔案說明符 : D:/xyqupdate.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:25:39
修改時間 : 2006-12-16 13:25:39
訪問時間 : 2006-12-16 13:31:22
大小 : 48249 位元組 47.121 KB
MD5 : 1793f871d0a290799b33838266228145
Complete scanning result of "xyqupdate.exe", received in VirusTotal at 12.16.2006, 06:31:04 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | BackDoor.Pomax |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Groger.A!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Oanum.H |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | MalwareScope.Worm.Viking.5 |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | W32/Agent.ATOX.dropper |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | Trojan.Downloader |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 48249 bytes
MD5: 1793f871d0a290799b33838266228145
SHA1: cd188cc7c43ecb644ee3d09d0dc65c028abd19ac
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=02be61099366
瑞星報為：Trojan.DL.Agent.bdj
檔案說明符 : D:/G_Setup.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:26:2
修改時間 : 2006-12-16 13:26:5
訪問時間 : 2006-12-16 13:35:18
大小 : 283360 位元組 276.736 KB
MD5 : f22b7e3f07032de537c88a2bd561ab26
Complete scanning result of "G_Setup.exe", received in VirusTotal at 12.16.2006, 06:35:44 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | Generic2.KGP |
| BitDefender | 7.2 | 12.16.2006 | Backdoor.Hupigon.DFL |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Pigeon.5qf!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Pigeon.GK |
| Ewido | 4.0 | 12.15.2006 | Backdoor.Hupigon.dfl |
| Fortinet | 2.82.0.0 | 12.16.2006 | W32/Hupigon.DFL!tr.bdr |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.15.2006 | Backdoor.Win32.Hupigon.dfl |
| Kaspersky | 4.0.2.24 | 12.16.2006 | Backdoor.Win32.Hupigon.dfl |
| McAfee | 4920 | 12.15.2006 | PWS-Lineage |
| Microsoft | 1.1804 | 12.15.2006 | Backdoor:Win32/Hupigon.TS |
| NOD32v2 | 1924 | 12.15.2006 | Win32/Hupigon |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BMZ |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | Backdoor/Hupigon.dfl |
| UNA | 1.83 | 12.15.2006 | Backdoor.Hupigon.78CC |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | Backdoor.Hupigon.DLR |
Aditional Information
File size: 283360 bytes
MD5: f22b7e3f07032de537c88a2bd561ab26
SHA1: a5b685f5ab123cd865ccb750f764445c64192568
瑞星報為：Backdoor.Gpigeon.kwh
檔案說明符 : D:/xyqup.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:26:25
修改時間 : 2006-12-16 13:26:26
訪問時間 : 2006-12-16 13:40:52
大小 : 102870 位元組 100.470 KB
MD5 : d96ad46145f2fb1780c984bb948c7df4
Complete scanning result of "xyqup.exe", received in VirusTotal at 12.16.2006, 06:40:30 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | PSW.Lineage.QE |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | Trojan.PWS.Lineage |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Lineage.0ow!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Lineage.PA |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | PossibleThreat!017039 |
| F-Prot | 3.16f | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | W32/PWStealer.gen1 |
| Ikarus | T3.1.0.26 | 12.15.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | New Malware.w |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BRP |
| Prevx1 | V2 | 12.16.2006 | Covert.Sys.Exec |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 102870 bytes
MD5: d96ad46145f2fb1780c984bb948c7df4
SHA1: 8c8b230df5f5f366bd84c31e9a635032339fbbb5
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=aed161290275
瑞星報為：Trojan.PSW.XYOnline.ix
檔案說明符 : D:/ztup.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:26:45
修改時間 : 2006-12-16 13:26:45
訪問時間 : 2006-12-16 13:48:25
大小 : 55808 位元組 54.512 KB
MD5 : b3f40eb1ab5da5c8f50a3fc0c414c9bc
Complete scanning result of "ztup.exe", received in VirusTotal at 12.16.2006, 06:48:03 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | HEUR/Malware |
| Authentium | 4.93.8 | 12.15.2006 | no virus found |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | BackDoor.Pomax |
| eSafe | 7.0.14.0 | 12.14.2006 | no virus found |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | no virus found |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | no virus found |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | suspicious |
| F-Prot | 3.16f | 12.15.2006 | no virus found |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | no virus found |
| Ikarus | T3.1.0.26 | 12.16.2006 | no virus found |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | no virus found |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Trj/Lineage.BSY |
| Prevx1 | V2 | 12.16.2006 | Trojan.Downloader |
| Sophos | 4.12.0 | 12.14.2006 | no virus found |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | no virus found |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 55808 bytes
MD5: b3f40eb1ab5da5c8f50a3fc0c414c9bc
SHA1: 9d0399d8e1039ca74d96499c32d419fb2ee7dcf3
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=5ccb62560089
瑞星報為：Trojan.DL.Agent.bdd
檔案說明符 : D:/rxup.exe
屬性 : A---
獲取檔案版本資訊大小失敗!
建立時間 : 2006-12-16 13:27:4
修改時間 : 2006-12-16 13:27:4
訪問時間 : 2006-12-16 13:53:50
大小 : 101285 位元組 98.933 KB
MD5 : 3796558fc0fa74b97b0eb28985bac73d
Complete scanning result of "rxup.exe", received in VirusTotal at 12.16.2006, 06:53:30 (CET).
| Antivirus | Version | Update | Result |
| AntiVir | 7.3.0.19 | 12.15.2006 | TR/Crypt.NSPM.Gen |
| Authentium | 4.93.8 | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| Avast | 4.7.892.0 | 12.15.2006 | no virus found |
| AVG | 386 | 12.15.2006 | no virus found |
| BitDefender | 7.2 | 12.16.2006 | no virus found |
| CAT-QuickHeal | 8.00 | 12.15.2006 | (Suspicious) - DNAScan |
| ClamAV | devel-20060426 | 12.15.2006 | no virus found |
| DrWeb | 4.33 | 12.15.2006 | no virus found |
| eSafe | 7.0.14.0 | 12.14.2006 | suspicious Trojan/Worm |
| eTrust-InoculateIT | 23.73.87 | 12.16.2006 | Win32/Lineage.8xk!Trojan |
| eTrust-Vet | 30.3.3254 | 12.15.2006 | Win32/Lineage.OZ |
| Ewido | 4.0 | 12.15.2006 | no virus found |
| Fortinet | 2.82.0.0 | 12.16.2006 | SPY/Lineage |
| F-Prot | 3.16f | 12.15.2006 | Possibly a new variant of W32/PWStealer.gen1 |
| F-Prot4 | 4.2.1.29 | 12.15.2006 | W32/PWStealer.gen1 |
| Ikarus | T3.1.0.26 | 12.16.2006 | Worm.Win32.Viking.cv |
| Kaspersky | 4.0.2.24 | 12.16.2006 | no virus found |
| McAfee | 4920 | 12.15.2006 | no virus found |
| Microsoft | 1.1804 | 12.15.2006 | no virus found |
| NOD32v2 | 1924 | 12.15.2006 | Win32/PSW.Lineage.DN |
| Norman | 5.80.02 | 12.15.2006 | no virus found |
| Panda | 9.0.0.4 | 12.16.2006 | Suspicious file |
| Prevx1 | V2 | 12.16.2006 | no virus found |
| Sophos | 4.12.0 | 12.14.2006 | Mal/Packer |
| Sunbelt | 2.2.907.0 | 11.30.2006 | no virus found |
| TheHacker | 6.0.3.132 | 12.14.2006 | no virus found |
| UNA | 1.83 | 12.15.2006 | no virus found |
| VBA32 | 3.11.1 | 12.15.2006 | MalwareScope.Backdoor.Hupigon.21 |
| VirusBuster | 4.3.19:9 | 12.15.2006 | no virus found |
Aditional Information
File size: 101285 bytes
MD5: 3796558fc0fa74b97b0eb28985bac73d
SHA1: c66f8ac2290580086cb55ead4c2f917b387995a5