优盘带来1只

千里同风

优盘外借带来两个，这是其中一只（名称未改）

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\attgnxd.rar'
C:\Documents and Settings\Administrator\桌面\attgnxd.rar
  [0] Archive type: RAR
  --> attgnxd.exe
      [DETECTION] Is the Trojan horse TR/Agent.28597
      [INFO]      The file was deleted!

Graybird

Starting the file scan:

Begin scan in 'D:\attgnxd.rar'
D:\attgnxd.rar
  [0] Archive type: RAR
  --> attgnxd.exe
      [DETECTION] Is the Trojan horse TR/Agent.28597
      [INFO]      The file was deleted!

leonfg

ESET
C:\Documents and Settings\GUNDAM\桌面\attgnxd.rar » RAR » attgnxd.exe - a variant of Win32/Delf.NDF worm

wangjay1980

detected: virus Virus.Win32.AutoRun.f        URL: http://bbs.kafan.cn/attachment.php?aid=192378//attgnxd.exe//FSG

天灰

C:\Documents and Settings\77\My Documents\attgnxd.rar>>attgnxd.exe        TrojanPSW.GamePass.vqj.lrjb        木马        还未处理

Nblock

ATTGNXD.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\PKFUQGF.EXE
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\RBOWYJI.EXE
是否删除木马程序及其衍生物?

鱼是一只我

kv2008～～

ballakay

Scanning Report
29 January 2008 11:08:47 - 11:08:47
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\attgnxd.rar


--------------------------------------------------------------------------------

Result: 1 malware found
Virus.Win32.AutoRun.f (virus)
C:\Users\Administrator\Desktop\attgnxd.rar\attgnxd.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-28_08
Spyware: 2008-01-28_08
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-28
F-Secure Libra: 2.04.01, 2008-01-28
F-Secure Orion: 1.02.37, 2008-01-28
F-Secure Draco: 1.00.35, 2008-01-14
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

xlys

对象: attgnxd.exe
        在压缩档案里: D:\Documents\桌面\attgnxd.rar
        状态: 已发现病毒
        病毒: Virus.Win32.AutoRun.f (KAV 引擎)
对象: attgnxd.rar
        路径: D:\Documents\桌面
        状态: 已发现病毒
        病毒: Virus.Win32.AutoRun.f (KAV 引擎)
分析完成: 2008-1-29 11:11
    已扫描 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件