Backdoor.Win32.Hupigon.lwnf

[system]

I found a new virus can not be detected by Avast!5.0.661.
PS:I reported to Avast! the virus and found no response. Why?
Download link:
hxxp://hotfile.com/dl/65212769/11051b4/VIP5.0.exe.html

[Tarq57]

Please nobody download this, unless you know what you are doing.

Devil, do not post links to live malware on the forum. Sanitize the link, by modifying your post, to read “hxxp” instead of “http”.

The sample can either be sent from the virus chest, or emailed to virus@avast.com zipped into an attachment, and preferably password protected. The password should be in the body of the message.

Also submit the file to www.virustotal.com for multiple scanning; post the url of the results here, please.

[Marc57]

Virus Total results:

http://www.virustotal.com/file-scan/report.html?id=c73e7022279ae665444b2ab5ac74926ade6de350b77a7f098f899fc73fd7a26d-1282973609

[Tarq57]

Marc57, you beat me to it. ;D
The translated name of the file is Thunder VIP account access device 5.0.exe.

[Marc57]

Hey Tarq57, I’ve sent the sample to Avast, Microsoft, Nod32, Trendmicro, F-secure, AntiVir, Symantec and ViRobot. I would send it to AVG, but can’t figure out how to get it to them.

Thanks for the translation, I just shortened it to VIP5.0.exe

Edit: add Malwarebytes to the list.

[system]

@Marc57 post:5

Hey Tarq57, I’ve sent the sample to Avast, Microsoft, Nod32, Trendmicro, F-secure, AntiVir, Symantec and ViRobot. I would send it to AVG, but can’t figure out how to get it to them.

Thanks for the translation, I just shortened it to VIP5.0.exe

Edit: add Malwarebytes to the list.

Hi Marc57,You can sent the sample virus to AVG by this mail：virus@avg.com.
PS:My english is too bad,don’t Laugh at me.Thanks!

[system]

@Tarq57 post:2

Please nobody download this, unless you know what you are doing.

Devil, do not post links to live malware on the forum. Sanitize the link, by modifying your post, to read “hxxp” instead of “http”.

The sample can either be sent from the virus chest, or emailed to virus@avast.com zipped into an attachment, and preferably password protected. The password should be in the body of the message.

Also submit the file to www.virustotal.com for multiple scanning; post the url of the results here, please.

Hi Tarq57，i think no need to modify the download link,we all know what they’re doing. Post in the forums, I always first uploaded virus samples to VirScan or VirusTotal for analysis.

[DavidR]

I can’t recall if have mentioned this to you before, but I have certainly mentioned it very recently.

If you have a sample send it directly to avast, don’t post links to file sharing sites, we don’t want the avast forums becoming a proxy malware distribution centre.

Firstly because you never know who will download it or what they will do with it. Inexperienced and curious users could well harm their systems. Those with malicious intent could try and infect others with it.

This is a support forum and our first responsibility it to ensure those who don’t know what they are doing (and are too curious for their own good) or have not taken pro-active measures to limit risk and damage from such samples.

[Marc57]

@Devil post:6

@Marc57 post:5

Hey Tarq57, I’ve sent the sample to Avast, Microsoft, Nod32, Trendmicro, F-secure, AntiVir, Symantec and ViRobot. I would send it to AVG, but can’t figure out how to get it to them.

Thanks for the translation, I just shortened it to VIP5.0.exe

Edit: add Malwarebytes to the list.

Hi Marc57,You can sent the sample virus to AVG by this mail：virus@avg.com.
PS:My english is too bad,don’t Laugh at me.Thanks!

Thanls for the info. Don’t worry, Your english is fine.