[MD5: 722978 DE5230]

qianwenxiang

一抓鸡器。。用完即中毒。。附生成物

红心王子

已删除: 木马程序 Rootkit.Win32.Agent.bo        文件: C:\Documents and Settings\Administrator\桌面\infected\fishpe.sys
已删除: 木马程序 Rootkit.Win32.Agent.bo        文件: C:\Documents and Settings\Administrator\桌面\infected\蜜蜂自动抓鸡器1.0.exe

FBAV

chabuchu

[ 本帖最后由 FBAV 于 2007-8-20 15:43 编辑 ]

hj5abc

有点晕..Newheur竟对sys下手了.

Scanned disks, folders and files: F:\082001[1]\
F:\082001[1]\fishpe.sys - probably unknown NewHeur_PE virus [7]
F:\082001[1]\蜜蜂自动抓鸡器1.0.exe - probably unknown NewHeur_PE virus [7]

tracydk

Nerazzurri

扫描进行于：2007-8-20 18:15:31
扫描日志
NOD32版本 2470 (20070819) NT
命令行： F:\Documents and Settings\simasc\桌面\082001

日期： 20.8.2007  时间：18:15:33
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\simasc\桌面\082001\
F:\Documents and Settings\simasc\桌面\082001\fishpe.sys - 未查明的 NewHeur_PE 病毒 [7]
F:\Documents and Settings\simasc\桌面\082001\蜜蜂自动抓鸡器1.0.exe - 未查明的 NewHeur_PE 病毒 [7]
已扫描的文件数目：2
已发现的病毒数目：2
完成时间： 18:15:35 总扫描时间：2 秒 (00:00:02)

注意：
[7] 该文件可能感染上未知病毒。
——————————————
Starting the file scan:
Begin scan in 'F:\Documents and Settings\simasc\桌面\082001'
F:\Documents and Settings\simasc\桌面\082001\fishpe.sys
      [DETECTION] Contains signature of the rootkit RKIT/Agent.BO.6
      [INFO]      The file was deleted!
F:\Documents and Settings\simasc\桌面\082001\蜜蜂自动抓鸡器1.0.exe
      [DETECTION] Contains signature of the rootkit RKIT/Agent.BO.12
      [INFO]      The file was deleted!

[ 本帖最后由 Kav6.0 于 2007-8-20 18:16 编辑 ]

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\新建文件夹'
C:\Documents and Settings\dell\桌面\新建文件夹\fishpe.sys
      [DETECTION] Contains signature of the rootkit RKIT/Agent.BO.6
      [WARNING]   The file was ignored!
C:\Documents and Settings\dell\桌面\新建文件夹\蜜蜂自动抓鸡器1.0.exe
      [DETECTION] Contains signature of the rootkit RKIT/Agent.BO.12
      [WARNING]   The file was ignored!

yashoo

已删除: 木马程序 Rootkit.Win32.Agent.bo        文件: E:\test\082001\fishpe.sys
已删除: 木马程序 Rootkit.Win32.Agent.bo        文件: E:\test\082001\蜜蜂自动抓鸡器1.0.exe

微点卫士

微点：
木马名称:Rootkit.Win32.Agent.hc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FISHPE.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FISHPE.SYS
是否删除RootKit程序?
木马名称:Rootkit.Win32.Agent.fi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\蜜蜂自动抓鸡器1.0.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

碧水寒潭

Start of the scan: 2007年8月20日  21:09

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\082001[1].part1.rar
  [0] Archive type: RAR
  --> fishpe.sys
      [DETECTION] Contains signature of the rootkit RKIT/Agent.BO.6
      [INFO]      The file was deleted!


End of the scan: 2007年8月20日  21:09
Used time: 00:08 min

The scan has been done completely.

      1 Scanning directories
      4 Files were scanned
      1 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      3 Archives were scanned
      0 Warnings
      2 Notes
      0 Hidden objects were found