9006f7

显示全部楼层 · 发表于 2007-7-5 16:16:56

Scan performed at: 2007-7-5 16:16:42
Scanning Log
NOD32 version 2379 (20070704) NT
Command line: C:\Documents and Settings\EQ2\桌面\vip[1].rar
Operating memory - is OK

Date: 5.7.2007 Time: 16:16:48
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\vip[1].rar
C:\Documents and Settings\EQ2\桌面\vip[1].rar ?RAR ?vip[1].exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:16:48 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-5 16:17:29

病毒: Win32:Agent-HFX [Trj]
文件: vip[1][1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GZI12LM5
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-5 16:17:52

2007/7/5 16:17:35 DMON 压缩文件 http://bbs.kafan.cn/attachment.php?aid=96883 可能是 Win32/Agent.NEO 木马的一个变种

显示全部楼层 · 发表于 2007-7-5 16:22:56

Begin scan in 'C:\Documents and Settings\Administrator\桌面\vip[1].rar'
C:\Documents and Settings\Administrator\桌面\
  vip[1].rar
[0] Archive type: RAR
--> vip[1].exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '46fcaabf.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-5 16:31:06

detected: Trojan program Trojan.BAT.KillAV.es File: C:\Documents and Settings\Owner\×ÀÃæ\vip[1].rar/vip[1].exe//#

显示全部楼层 · 发表于 2007-7-5 16:35:00

C:\ABC\vip[1].rar:\vip[1].exe - Signature 'Backdoor.Win32.Agent.ahj' found
C:\ABC\vip[1].rar

2 Files scanned
(1 Archiv with 1 file)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016

显示全部楼层 · 发表于 2007-7-5 16:36:35

上报

显示全部楼层 · 发表于 2007-7-5 17:58:13

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
GenPack:Generic.Popwin.02C4DE7B

[病毒样本] 9006f7

本帖子中包含更多资源