只有红伞,nod32,clamav报[ad2f1d]

promised

[ 本帖最后由 promised 于 2007-9-4 19:03 编辑 ]

小邪邪

在咖啡中级防护下执行

aziok

AhnLab-V3 2007.9.1.0 2007.09.03 -
AntiVir 7.4.1.66 2007.09.04 TR/Spy.Agent.ABE
Authentium 4.93.8 2007.09.04 -
Avast 4.7.1029.0 2007.09.04 -
AVG 7.5.0.485 2007.09.04 -
BitDefender 7.2 2007.09.04 -
CAT-QuickHeal 9.00 2007.09.03 -
ClamAV 0.91.2 2007.09.04 Trojan.Agent-5462
DrWeb 4.33 2007.09.04 -
eSafe 7.0.15.0 2007.09.03 -
eTrust-Vet 31.1.5107 2007.09.04 -
Ewido 4.0 2007.09.04 -
FileAdvisor 1 2007.09.04 -
Fortinet 3.11.0.0 2007.09.04 -
F-Prot 4.3.2.48 2007.09.04 -
F-Secure 6.70.13030.0 2007.09.04 -
Ikarus T3.1.1.12 2007.09.04 -
Kaspersky 4.0.2.24 2007.09.04 -
McAfee 5111 2007.09.03 -
Microsoft 1.2803 2007.09.04 -
NOD32v2 2502 2007.09.04 a variant of Win32/Agent.ABE
Norman 5.80.02 2007.09.04 -
Panda 9.0.0.4 2007.09.04 -
Prevx1 V2 2007.09.04 -
Rising 19.39.12.00 2007.09.04 -
Sophos 4.21.0 2007.09.04 -
Sunbelt 2.2.907.0 2007.08.31 -
Symantec 10 2007.09.04 -
TheHacker 6.1.9.177 2007.09.04 -
VBA32 3.12.2.3 2007.09.03 -
VirusBuster 4.3.26:9 2007.09.03 -
Webwasher-Gateway 6.0.1 2007.09.04 Trojan.Spy.Agent.ABE

微点卫士

上报微点

1688388728

Attempt to set value PendingFileRenameOperations within the key HKLM\SYSTEM\ControlSet001\Control\Session Manager\

solcroft

timhas266

Start of the scan: Tuesday, 4 September, 2007  21:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\dyisgmllk.zip'
C:\Documents and Settings\tim\桌面\dyisgmllk.zip
  [0] Archive type: ZIP
  --> dyisgmllk.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.ABE
      [INFO]      A backup was created as '47466315.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2785
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\dyisgmllk.exe

C:\Documents and Settings\uhthn\Desktop\dyisgmllk.exe - OK

1 Files scanned
0 Infected files found
0 Suspicious files found
0 Files cured
0 Files deleted

Killer_cg

小A