rootkit a25138

solcroft

.

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\zore2.zip'
C:\Documents and Settings\Administrator\桌面\zore2.zip
  [0] Archive type: ZIP
  --> zore2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年9月18日  03:52
Used time: 00:15 min

The scan has been done completely.

The EQs

Scan performed at: 2007-9-18 4:43:10
Scanning Log
NOD32 version 2535 (20070917) NT
Command line: C:\Documents and Settings\Don johnson\桌面\zore2.zip
Operating memory - is OK

Date: 18.9.2007  Time: 04:43:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\zore2.zip
C:\Documents and Settings\Don johnson\桌面\zore2.zip ?ZIP ?zore2.exe - probably a variant of Win32/Rootkit.Agent.NBN trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 04:43:14 Total scanning time: 0 sec (00:00:00)

qwerasdf123

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  bbs.kafan.cn/attachment.php?aid=129111
Information:  Is the Trojan horse TR/Crypt.XDR.Gen  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.10, VDF 6.39.1.140

剑指七星

已检测到: 木马程序 Rootkit.Win32.Agent.ea        URL: http:/bbs.kafan.cn/attachment.php?aid=129111/zore2.exe//PE_Patch.UPX//UPX

wu19934718

avast pass

运指如飞

微点PASS

soul20010

Result: 1 malware found
Rootkit.Win32.Agent.ea (virus)

    * C:\Documents and Settings\1\×ÀÃæ\zore2.zip\zore2.exe

fireworld

毒霸直接挂了

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\zore2.zip - probably a variant of Win32/Rootkit.Agent.NBN trojan - deleted - quarantined
D:\Documents and Settings\EKINCHENG\桌面\zore2.zip » ZIP » zore2.exe - probably a variant of Win32/Rootkit.Agent.NBN trojan