123.exe [md5:68b7ce]

mofunzone

avast试坐机上发现
File:         123.exe
Status:         INFECTED/MALWARE
MD5:         68b7cee2511f32fc2c14fce5572fbce9
Packers detected:         ARM
Bit9 reports:         File not found

Scanner results
Scan taken on 04 Dec 2007 06:07:04 (GMT)
A-Squared         Found nothing
AntiVir         Found WORM/Rous.A
ArcaVir         Found Trojan.Agent.Azk
Avast         Found nothing
AVG Antivirus         Found nothing
BitDefender         Found nothing
ClamAV         Found nothing
CPsecure         Found nothing
Dr.Web         Found nothing
F-Prot Antivirus         Found nothing
F-Secure Anti-Virus         Found Trojan.Win32.Agent.azk
Fortinet         Found nothing
Ikarus         Found Virus.Trojan.Win32.Agent.azk
Kaspersky Anti-Virus         Found Trojan.Win32.Agent.azk
NOD32         Found nothing
Norman Virus Control         Found nothing
Panda Antivirus         Found nothing
Rising Antivirus         Found nothing
Sophos Antivirus         Found Mal/Packer
VirusBuster         Found nothing
VBA32         Found Trojan.Win32.Agent.azk

绅博周幸

Nod32 no virus found

sam.to

Kaspersky Virus Scanner


Scanned file:   123.rar - Infected
123.rar/123.exe - infected by Trojan.Win32.Agent.azk

googlehack

一个木马，虽然报的少

lidong3538

已检测到: 木马程序 Trojan.Win32.Agent.azk       

KAV7.0报

我自逍遥

Virus or unwanted program 'Worm/Rous.A [WORM/Rous.A]'
detected in file 'C:\Sandbox\wuliao\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\0TQ1YXIT\123[1].rar.
Action performed: Deny access

aceilete

果然是木马一个，Nod32没报，但我解压后运行却发现ZA弹出窗口提示有一个程序要运用脚本，点Deny后再用卡巴扫描发现木马。

jimmyleo

D:\Download\Scan\123.exe - Suspect code-parts found (Level: 100)

        1 File scanned
          (0 Archives with 0 files)
        0 Signatures found
        1 Suspect code-part found
        Used time: 0:00.187

电影结束了

tf....
估计在想运行脚本的时候触了我的规则．．．．

a256886572008

又是鴿子
















[ 本帖最后由 a256886572008 于 2007-12-4 19:08 编辑 ]