还是vip引发出来的东西[8F314D]

woai_jolin

kv pass

红心王子

C:\Documents and Settings\Administrator\桌面\70.z
ip>>70.exe
Worm.Win32.Agent.ae
woai-jolin开启kv的监控运行一下，会拦截的

taihuxian

Scan performed at: 2007-8-9 20:04:44
Scanning Log
NOD32 version 2446 (20070809) NT
Command line: C:\Documents and Settings\Administrator\×ÀÃæ\70.zip
Operating memory - is OK

Date: 9.8.2007  Time: 20:04:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\×ÀÃæ\70.zip
C:\Documents and Settings\Administrator\×ÀÃæ\70.zip ?ZIP ?70.exe - probably a variant of Win32/Agent.NEO trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:04:50 Total scanning time: 1 sec (00:00:01)

gho

detected: Trojan program Backdoor.Win32.Agent.ahj        URL: http://bbs.kafan.cn/attachment.php?aid=110949/70.exe

king6808

AhnLab-V3 2007.8.9.2 2007.08.09 -
AntiVir 7.4.0.57 2007.08.09 TR/Crypt.NSPM.Gen
Authentium 4.93.8 2007.08.09 -
Avast 4.7.1029.0 2007.08.09 Win32:Agent-JOF
AVG 7.5.0.476 2007.08.09 BackDoor.Agent.KQV
BitDefender 7.2 2007.08.10 GenPack:Generic.Popwin.0E729941
CAT-QuickHeal 9.00 2007.08.09 (Suspicious) - DNAScan
ClamAV 0.91 2007.08.10 -
DrWeb 4.33 2007.08.10 Trojan.Popwin
eSafe 7.0.15.0 2007.08.10 Win32.Popwin
eTrust-Vet 31.1.5047 2007.08.10 -
Ewido 4.0 2007.08.09 -
FileAdvisor 1 2007.08.10 -
Fortinet 2.91.0.0 2007.08.10 W32/Winko.A!tr
F-Prot 4.3.2.48 2007.08.09 -
F-Secure 6.70.13030.0 2007.08.10 Backdoor.Win32.Agent.ahj
Ikarus T3.1.1.12 2007.08.09 Trojan-PWS.Win32.Agent.BU
Kaspersky 4.0.2.24 2007.08.10 Backdoor.Win32.Agent.ahj
McAfee 5094 2007.08.09 W32/Winko.worm
Microsoft 1.2704 2007.08.10 Worm:Win32/Winko.A
NOD32v2 2448 2007.08.10 probably a variant of Win32/Agent.NEO
Norman 5.80.02 2007.08.09 Hupigon.gen66
Panda 9.0.0.4 2007.08.09 -
Prevx1 V2 2007.08.10 Generic.Malware
Rising 19.35.40.00 2007.08.10 Worm.Win32.Agent.ae
Sophos 4.19.0 2007.08.01 -
Sunbelt 2.2.907.0 2007.08.10 Backdoor.Win32.Agent.ahj
Symantec 10 2007.08.10 W32.Popwin
TheHacker 6.1.7.166 2007.08.09 Backdoor/Agent.ahj
VBA32 3.12.2.2 2007.08.09 suspected of Trojan-PSW.Game.63 (paranoid heuristics)
VirusBuster 4.3.26:9 2007.08.09 -
Webwasher-Gateway 6.0.1 2007.08.09 Trojan.Crypt.NSPM.Gen