这个也被捆绑鸽子了【BEA9EA】

zane_xzz

BEA9EA

mofunzone

里面的东西

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\111111111111111111.rar'
C:\Documents and Settings\Administrator\My Documents\
  111111111111111111.rar
    [0] Archive type: RAR
    --> 111111111111111111.exe
        [DETECTION] Is the Trojan horse TR/Spy.Agent.98893
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

红心王子

a-squared 3.0.0.123 2007.09.06 2007-09-06 - 8.073
Arcavir 1.0.4 200709061952 2007-09-06 - 1.741
AVAST 1.0.8 000773-1 2007-09-06 - 2.353
AVG 7.5.48.442 269.13.7/992 2007-09-06 - 2.997
BitDefender 7.60825.864706 7.14649 2007-09-07 - 6.652
CA (VET) 8.4.0.24 31.1.5116 2007-09-07 - 1.048
ClamAV  0.91.1 4173 2007-09-07 - 0.405
Comodo 2.11 2.0.0.276 2007-09-06 - 1.286
ewido 4.0.0.2 2007.09.06 2007-09-06 - 3.325
F-SECURE 5.51.6100 2007.09.07.01 2007-09-07 - 2.859
IKARUS T3.1.1.12 2007.09.06.69461 2007-09-06 Trojan.Win32.Agent.FO 1.676
MKS_VIR 2.01 2007.09.06 2007-09-06 - 3.015
NOD32 2.70.8 2511 2007-09-07 - 0.318
nProtect 2007-09-06.00 43495 2007-09-06 - 14.596
QuickHeal 9.00 2007.09.06 2007-09-06 - 3.047
SOPHOS 2.49.1 4.21 2007-09-07 - 4.350
The Hacker 6.1.9 v00180 2007-09-06 - 4.638
VBA32 3.12.2.4 20070906.0441 2007-09-06 BackDoor.Pigeon.775 1.060
VirusBuster 4.3.19:9 9.102.1/11.0 2007-09-06 - 2.019
冰岛杀毒 3.16.16 2007.09.06 2007-09-06 - 0.442
卡巴斯基 5.5.10 2007.09.07 2007-09-07 - 0.561
大蜘蛛 4.33 2007.09.07 2007-09-07 - 5.454
小红伞 7.6.0.5 6.39.1.100 2007-09-06 - 5.693
江民杀毒 10.00.650 2007.09.06 2007-09-06 - 1.003
熊猫卫士 9.04.03.0001 2007.09.06 2007-09-06 - 4.813
瑞星 19.0 19.39.32.00 2007-09-06 - 10.700
诺曼 5.91.07 5.90 2007-09-06 - 3.800
赛门铁克 1.3.0.24 20070906.009 2007-09-06 - 0.225
趋势 8.500-1001 4.699.00 2007-09-06 - 0.049
迈克菲 5.2.00 5114 2007-09-06 - 1.001
金山毒霸 2007.6.20.249 2007.9.6 2007-09-06 - 1.901

saga3721

Virus or unwanted program 'TR/Spy.Agent.98893 [TR/Spy.Agent.98893]'

微点卫士

微点：
C:\WINDOWS.0\SYSTEM32\SVCHOSL.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:2936
远端地址:218.22.199.220(安徽)
远端端口:80
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS优化大师通用注册机.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WINDOWS优化大师通用注册机.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\111111111111111111.EXE
3) C:\WINDOWS.0\SYSTEM32\SVCHOSL.EXE
是否删除木马程序及其衍生物?

红心王子

2楼M发的KV报
江民杀毒 10.00.650 2007.09.06 2007-09-06 Backdoor/Huigezi.2007.yuc

zszzd

运行了,没反映,也没有SVCHOSL.EXE,没联网动作

螳螂打石子

红伞扫描不报 运行报

king6808

NOD32 挂

timhas266

Start of the scan: Friday, 7 September, 2007  16:38

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\111111111111111111.rar'
C:\Documents and Settings\tim\桌面\111111111111111111.rar
  [0] Archive type: RAR
  --> 111111111111111111.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.98893
      [INFO]      A backup was created as '47120e32.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!