NEED HELP>> AgBot

03/15/2009 12:16 lucianesanu#1
Hi guy's i'm a new members, and i have a question.
I download the latest AgBot from rev6-agBot(2.7.8)- , and i make a quick scan with "Virus Total" , look what i found:


File Package2.7.8.nomap.zip received on 03.15.2009 09:35:36 (CET)
Current status: finished

Result: 20/39 (51.28%)
Compact Print results
Antivirus Version Last Update Result
a-squared 4.0.0.101 2009.03.15 Backdoor.Win32.Hupigon!IK
AhnLab-V3 5.0.0.2 2009.03.15 -
AntiVir 7.9.0.114 2009.03.13 -
Authentium 5.1.0.4 2009.03.14 -
Avast 4.8.1335.0 2009.03.14 Win32:Hupigon-MYC
AVG 8.0.0.237 2009.03.14 BackDoor.Hupigon4.BFCD
BitDefender 7.2 2009.03.15 Backdoor.Agent.AAEB
CAT-QuickHeal 10.00 2009.03.14 Backdoor.Hupigon.fwkj
ClamAV 0.94.1 2009.03.15 -
Comodo 1056 2009.03.14 Unclassified Malware
DrWeb 4.44.0.09170 2009.03.15 -
eSafe 7.0.17.0 2009.03.12 Win32.PossibleThreat
eTrust-Vet 31.6.6388 2009.03.09 -
F-Prot 4.4.4.56 2009.03.14 -
F-Secure 8.0.14470.0 2009.03.15 -
Fortinet 3.117.0.0 2009.03.15 W32/Hupigon.FWKJ!tr.bdr
GData 19 2009.03.15 Backdoor.Agent.AAEB
Ikarus T3.1.1.45.0 2009.03.14 Backdoor.Win32.Hupigon
K7AntiVirus 7.10.671 2009.03.14 Backdoor.Win32.Hupigon
Kaspersky 7.0.0.125 2009.03.15 -
McAfee 5553 2009.03.14 BackDoor-AWQ.b
McAfee+Artemis 5553 2009.03.14 BackDoor-AWQ.b
McAfee-GW-Edition 6.7.6 2009.03.13 -
Microsoft 1.4405 2009.03.15 -
NOD32 3937 2009.03.15 -
Norman 6.00.06 2009.03.13 W32/Hupigon.FGCD
nProtect 2009.1.8.0 2009.03.15 -
Panda 10.0.0.10 2009.03.14 Bck/Hupigon.AZG
PCTools 4.4.2.0 2009.03.14 -
Prevx1 V2 2009.03.15 High Risk System Back Door
Rising 21.20.61.00 2009.03.15 -
Sophos 4.39.0 2009.03.15 -
Sunbelt 3.2.1858.2 2009.03.15 Backdoor.Win32.Hupigon.fwkj
Symantec 1.4.4.12 2009.03.15 Backdoor.Trojan
TheHacker 6.3.3.0.282 2009.03.15 Backdoor/Hupigon.fwkj
TrendMicro 8.700.0.1004 2009.03.13 -
VBA32 3.12.10.1 2009.03.15 Backdoor.Win32.Hupigon.fwkj
ViRobot 2009.3.13.1648 2009.03.13 -
VirusBuster 4.6.5.0 2009.03.14 -
Additional information
File size: 4570583 bytes
MD5...: 906788d6bdc14090d2bf3a8e95818ee0
SHA1..: eddc49f1134e3df565141b3df82be24374256387
SHA256: 961f6d32a56ba348cee3e9d2f8eccf6445c0d77200cb54b24a b9f9bd4bf7953d
SHA512: 06a3f0a88c62f2964029abcc1463bcea192110d650ce07ffdc f2d7400cab4309
ffc1c79a62a2c4fb087b7c0b173d12571ffb324bdf9c677103 29971831294d1a
ssdeep: 98304:WT/LuQaEZ1LB3glK9OcTMISBBG3kpL7CDmRLf0zkMBJeAE7:W/uQ7VBPu5
BG3aKDEk07

PEiD..: -
TrID..: File type identification
ZIP compressed archive (99.8%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: -
packers (Kaspersky): ASPack
packers (F-Prot): Unicode, Aspack


FILE IS FULL WITH TROJAN VIRUS>> I DON'T THINK THAT IS NORMAL....OR IS NORMAL?

Or can someone say plis from where i can get a file clean.

THKS IN ADVANCE!!!!!!
03/15/2009 12:47 theoneofgod#2
If you downloaded from [Only registered and activated users can see links. Click Here To Register...]

then it's totally safe, a lot of people use it.

~Error.
03/15/2009 14:43 lucianesanu#3
Yes from that link i download AgBot...so u say that is safe...but i wonder why my antivirus get crazy when i open this .zip....
Any way THKS for u support...
03/15/2009 14:55 theoneofgod#4
Quote:
Originally Posted by lucianesanu View Post
Yes from that link i download AgBot...so u say that is safe...but i wonder why my antivirus get crazy when i open this .zip....
Any way THKS for u support...
What anti virus do you use?
03/15/2009 16:20 Hussert#5
Agbot is well known by now. As theoneofgod said, as long as you download from the offical links ([Only registered and activated users can see links. Click Here To Register...]) then you're safe.

Those scans are just due to the way agbot works/coded. In other words, false positives.
Use another anti-virus if you can't modify your current anti-virus options to entrust agbot.

# Closed