能下一包东西，哪位去下点回来[E34A6E]

gho

2007-8-19        13:44:49        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\70.exe        New Malware.dm (Trojan)

欠妳緈諨

这个下载者居然被AVAST杀了

The EQs

没有看到哪个杀软报下载者。。。。

promised

你不是去运行了吗

tracydk

taihuxian

C:\Documents and Settings\Administrator\桌面\样本\70.zip=>70.exe        Infected: GenPack:Generic.Popwin.B55A9E2B
C:\Documents and Settings\Administrator\桌面\样本\70.zip=>70.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\70.zip        Moved

坐在墙头

虚拟机里面开着EQ运行了下，太恐怖了，想抓几个样本出来的，机器反应不过来，太卡了，只好还原

398566384

检测到病毒: Win32:Agent-HFX [Trj]

发现病毒,在下载网页内容时.

地址: bbs.kafan.cn

wangjay1980

不是下载者

Hello,

70.exek - Backdoor.Win32.Agent.ari

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 70.zip

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.04
nvcbin.def revision 5.90.00 of 2007/08/17 08:03:55 (830940 variants)
nvcmacro.def revision 5.90.00 of 2007/08/06 19:46:49 (20358 variants)
Total number of variants: 851298
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD13.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: F:\v\70.zip
        0 ms F:\v\70.zip : 70.exe                                         Trojan Hupigon.gen66 ()
        0 ms F:\v\70.zip                                                
        0 ms F:\v\70.zip:Zone.Identifier                                 
- File F:\v\70.zip quarantined.

===================================================================================================

The scanning started: 2007/08/19 15:35:52
               ended: 2007/08/19 15:35:53
Logged on as        : Administrator
on hostname         : 2FF87FC2B9AB46F

Scanning results:
   Total number of files found..............................:       3
   Number of files scanned..................................:       3
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2005 Norman ASA.