Backdoor.WIN32.hupigon.dccn infection

[sprintman]

SD can't see this, are PC Tools aware of this infection??

[AChen]

Hi sprintman,

Could you please run the Malware Detective tool and i'll look into this.

[sprintman]

Hi

runing Malware detective and here is report from a-squared

a-squared Free - Version 3.5
Last update: 19/08/2008 9:52:44 AM

Scan settings:

Objects: Memory, Traces, Cookies
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 19/08/2008 10:29:43 AM

[732] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[756] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[800] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[812] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[964] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1024] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1060] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1216] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1308] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1356] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1432] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1708] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1820] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1864] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1912] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[1988] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2020] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[128] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[184] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[228] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[272] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[368] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[544] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2120] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2304] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2312] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2336] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2372] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2412] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2432] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2448] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2492] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2500] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2536] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2564] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2568] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2592] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2596] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2624] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2628] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2780] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2852] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[2860] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[3092] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[3816] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
[3948] C:\PROGRA~1\Spyware Doctor\Tools\eg.dat detected: Backdoor.Win32.Hupigon.dccn
C:\Documents and Settings\Administrator\Cookies\administrator@googl e.com[1].txt detected: Trace.TrackingCookie
C:\Documents and Settings\Administrator\Cookies\administrator@googl e.com[2].txt detected: Trace.TrackingCookie
C:\Documents and Settings\Administrator\Cookies\administrator@news. com[1].txt detected: Trace.TrackingCookie

Scanned

Files: 2449
Traces: 431434
Cookies: 40
Processes: 52

Found

Files: 0
Traces: 0
Cookies: 3
Processes: 46
Registry keys: 0

Scan end: 19/08/2008 10:32:45 AM
Scan time: 0:03:02

[AChen]

Could you zip up eg.dat and send this to my email address. We need to check to see if this is an infection or a FP. I'll send my email address via PM.

[costcolio]

http://www.pctools.com/forum/showthread.php?t=53097&page=3

Is this a new situation or the same as the link shown above?

[AChen]

http://www.pctools.com/forum/showthread.php?t=53097&page=3

Is this a new situation or the same as the link shown above?

It does appear to be a similar circumstance as that thread and could quite possibly be a FP, but will need a sample of the file to be for certain :)