2个

photonok

D:\DLnc\Do\svchost.rar » RAR » svchost\-.exe - Win32/Agent.NGO trojan
D:\DLnc\Do\svchost.rar » RAR » svchost\svchost.exe - a variant of Win32/Delf.ASH trojan

gho

:\Documents and Settings\gho\桌面\svchost\-.exe        New Malware.em (Trojan)
2007-12-9        19:58:17        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\svchost\svchost.exe        Generic Delphi (Trojan)

欠妳緈諨

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1056
Paranoia Database - 49948
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\-.exe - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\svchost.exe - Infected WIN32.BACKDOOR.HUPIGON.10 - Deleted

2 Files scanned
1 Infected files found
1 Suspected files found
0 Files disinfected
1 Files deleted

Graybird

The file 'svchost.exe' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Agent.dbf. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.01.61. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

Graybird

Starting the file scan:

Begin scan in 'E:\svchost.rar'
E:\svchost.rar
  [0] Archive type: RAR
  --> svchost\-.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> svchost\svchost.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.dbf Backdoor server programs
      [WARNING]   The file was ignored!

Yeah!  入库了~

sam.to

Kaspersky Virus Scanner


Scanned file:   svchost.rar - Infected
svchost.rar/svchost/-.exe - infected by Trojan-Proxy.Win32.Horst.abu
svchost.rar/svchost/svchost.exe - infected by Backdoor.Win32.Agent.dbf