2个8749病毒样本，用微点的进来测试一下

pluto1313

两个不同的变种，其中 1.dll 一个来自http://bbs.kafan.cn/viewthread.php?tid=112148&extra=page%3D1&page=1这个贴

不是只有exe、com等这些可以执行的文件才是病毒，如果微点只防这些简直太小儿科了。至少也该把vbs、dll的防护加到里面。。。

用微点的这样测，在 命令提示符 下输入以下命令（注意参数 m 区分大小写）：

Rundll32.exe 路径\1.dll,m

或者

Rundll32.exe 路径\2.dll,m

这也是这个病毒的加载方式，如果微点防不了那就无话可说了。。。

xxwpk007

已检测到: 木马程序 Trojan.Win32.Agent.aac        URL: http://bbs.kafan.cn/attachment.php?aid=105629//1.dll//NSPack
已检测到: 木马程序 Trojan-PSW.Win32.QQPass.xp        URL: http://bbs.kafan.cn/attachment.php?aid=105629//2.dll//NSPack

woai_jolin

曲中求

Scan performed at: 2007-7-27 11:25:34
Scanning Log
NOD32 version 2424 (20070726) NT
Command line: F:\virus\virus.rar

Date: 27.7.2007  Time: 11:25:36
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\virus\virus.rar
F:\virus\virus.rar ?RAR ?1.dll - probably a variant of Win32/Agent.AAC trojan
F:\virus\virus.rar ?RAR ?2.dll - probably a variant of Win32/Agent.AAC trojan
Number of scanned files: 3
Number of threats found: 2
Time of completion: 11:25:39 Total scanning time: 3 sec (00:00:03)

dyw1021

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> 1.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 2.dll
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.XP
      [INFO]      The file was moved to '471b6604.qua'!


End of the scan: 2007年7月27日  11:25
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      2 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Agent.ppn   

用户来源：局域网

软件版本：19.33.40


纯属凑热闹

一派胡言

江民习惯的飘过。

tracydk

avast挂

Nblock

呵呵

promised

LS灌水