2个，avast发飙[MD5: BD8A2C 0E7A74]

zane_xzz

[MD5: BD8A2C 0E7A74]

Check system areas...
Check selected directories and files...
Object: system32\7E375968.DLL\[NsPack]
In archive: C:\Documents and Settings\Administrator\桌面\system32.rar
Status: Virus detected
Virus: Win32:Agent-GPD [Trj] (Engine B)
Object: system32\8922FCE0.EXE\[NsPack]
In archive: C:\Documents and Settings\Administrator\桌面\system32.rar
Status: Virus detected
Virus: Win32:Agent-HFX [Trj] (Engine B)
Object: system32.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Win32:Agent-GPD [Trj], Win32:Agent-HFX [Trj] (Engine B)
Analysis complete: 7/18/2007 16:07
    1 files checked
    1 infected files detected
    0 suspected files detected

风野胤

Scanning Log
NOD32 version 2404 (20070717) NT
Command line: C:\Documents and Settings\Administrator\ ?
?桌面\??.rar
Checking CRC of NOD32.EXE: Status OK
Scanning memory: Not performed (option disabled)
Error occurred while scanning MBR sector of the 2.  ?
?physical disk. Error reading sector.
Error occurred while scanning MBR sector of the 3.  ?
?physical disk. Error reading sector.
Date: 18.7.2007  Time: 16:10:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\Administrator\桌面\??.rar
C:\Documents and Settings\Administrator\桌面\??.rar ?RAR  ?
??7E375968.DLL - probably a variant of Win32/Agent.NEO  ?
?trojan
C:\Documents and Settings\Administrator\桌面\??.rar ?RAR  ?
??8922FCE0.EXE - probably a variant of Win32/Agent.NEO  ?
?trojan
Number of scanned files: 2
Number of threats found: 2
Time of completion: 16:10:15 Total scanning time: 1 sec  ?
?(00:00:01)

The EQs

Scan performed at: 2007-7-18 16:10:23
Scanning Log
NOD32 version 2404 (20070717) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 18.7.2007  Time: 16:10:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?7E375968.DLL - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?8922FCE0.EXE - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 16:10:31 Total scanning time: 1 sec (00:00:01)

啊弥陀佛

微点砍掉

风雪

费尔
1184746674,2007-7-18 16:17:54,Heuri.Possible/Packed,启发式扫描,mygood,D:\3\新建文件夹\新建文件夹\8922FCE0.EXE,Realtime scan

woai_jolin

2007/7/18 16:15:47        Scanning Log
2007/7/18 16:15:47        Version of virus signature database: 2404 (20070717)
2007/7/18 16:15:47        Date: 18.7.2007  Time: 16:15:47
2007/7/18 16:15:47        Scanned disks, folders and files: F:\v\
2007/7/18 16:15:48        F:\v\样本.rar - probably a variant of Win32/Agent.NEO trojan - deleted - quarantined
2007/7/18 16:15:48        F:\v\样本.rar » RAR » 7E375968.DLL - probably a variant of Win32/Agent.NEO trojan
2007/7/18 16:15:48        F:\v\样本.rar » RAR » 8922FCE0.EXE - probably a variant of Win32/Agent.NEO trojan
2007/7/18 16:15:48        Number of scanned files: 3
2007/7/18 16:15:48        Number of threats found: 2
2007/7/18 16:15:48        Time of completion: 16:15:48  Total scanning time: 1 sec (00:00:01)

wangjay1980

detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/8922FCE0.EXE

wangjay1980

deleted: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/7E375968.DLL
deleted: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/8922FCE0.EXE

zengmingwh

Begin scan in 'F:\样本.rar'
F:\样本.rar
  [0] Archive type: RAR
  --> 8922FCE0.EXE
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.780 Backdoor server programs
      [WARNING]   The file was ignored!

scottxzt

以知了.