下载者 刚从客户机子上搞来的样本(过DR4.44)

yclidong

AntiVir PersonalEdition Classic
Report file date: 2007年11月2日 星期五  16:29

Scanning for 912638 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]

Starting the file scan:
Begin scan in 'C:\Documents and Settings\Administrator\桌面\Viurs.rar'
C:\Documents and Settings\Administrator\桌面\Viurs.rar
  [0] Archive type: RAR
  --> 00042FA7.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
  --> 00120FB7.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
  --> 016074C2.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
      [INFO]      The file was moved to '479fe04a.qua'!
End of the scan: 2007年11月2日 星期五  16:29
Used time: 00:08 min
The scan has been done completely.
      0 Scanning directories
      5 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

uhthn2002

C:\Documents and Settings\Uhthn\Desktop\Viurs\00042FA7.exe : infected Trojan-Downloader.Win32.Agent.bkw
C:\Documents and Settings\Uhthn\Desktop\Viurs\00120FB7.exe : infected Trojan-Downloader.Win32.Agent.bkw
C:\Documents and Settings\Uhthn\Desktop\Viurs\016074C2.exe : infected Trojan-Downloader.Win32.Agent.bkw


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 4     
- scanned         : 0       -  scanned    : 0       - scanned     : 4     
- contain viruses : 0       -  infected   : 0       - infected    : 3     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0     

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 786
Paranoia Database - 48413
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\Viurs

C:\Documents and Settings\Uhthn\Desktop\Viurs\autorun.inf - Infected VIRUS.AUTORUN.12 - Deleted
C:\Documents and Settings\Uhthn\Desktop\Viurs\00042FA7.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\Viurs\00120FB7.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\Viurs\016074C2.exe - Suspected TROJAN-PSW.ONLINEGAMES.2

4 Files scanned
1 Infected files found
3 Suspected files found
0 Files disinfected
1 Files deleted

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Sadback.a           

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.16.42

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.bkw        File: C:\Documents and Settings\Owner\×ÀÃæ\Viurs.rar/00042FA7.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.bkw        File: C:\Documents and Settings\Owner\×ÀÃæ\Viurs.rar/00120FB7.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.bkw        File: C:\Documents and Settings\Owner\×ÀÃæ\Viurs.rar/016074C2.exe//PE_Patch//UPack

傻猪猪米走鸡

Scan Log
Version of virus signature database: 2634 (20071102)
Date: 2007-11-2  Time: 23:47:50
Scanned disks, folders and files: F:\virus\Viurs.rar
F:\virus\Viurs.rar » RAR » 00042FA7.exe - probably unknown NewHeur_PE virus [7]
F:\virus\Viurs.rar » RAR » 00120FB7.exe - probably unknown NewHeur_PE virus [7]
F:\virus\Viurs.rar » RAR » 016074C2.exe - probably unknown NewHeur_PE virus [7]
Number of scanned objects: 4
Number of threats found: 3
Time of completion: 23:47:51  Total scanning time: 1 sec (00:00:01)
Notes:
[7] Object is probably infected with an unknown virus.

spiderss

卡巴拒绝下载病毒包

xdandking

用红伞测测 应该可以拿下

nealee

。。。。  

pmj_sh

[0] Archive type: RAR
  --> 00042FA7.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
  --> 00120FB7.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
  --> 016074C2.exe
      [DETECTION] Is the Trojan horse TR/Agent.8900
      [WARNING]   The file was ignored!


End of the scan: 2007年11月3日  11:13
Used time: 00:01 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

29159011

蠕虫名称:Worm.Win32.Agent.deg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIURS\00042FA7.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.deg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIURS\00120FB7.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.deg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIURS\016074C2.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?