某贴落雪下载者挖的后门

promised

C:\ABC\winhex32.rar:\Server.exe - 特征码 'Virus.Win32.Virut.n' 被发现
C:\ABC\winhex32.rar:\WiNHeX32.dll - 特征码 'Virus.Win32.Visel.D' 被发现

hshhua01

发错了

[ 本帖最后由 hshhua01 于 2008-2-6 22:34 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\winhex32.rar'
E:\winhex32.rar
  [0] Archive type: RAR
  --> Server.exe
      [DETECTION] Is the Trojan horse TR/Agent.119512
  --> WiNHeX32.dll
      [DETECTION] Is the Trojan horse TR/Agent.135168.11
      [INFO]      The file was deleted!

清蒸波波面

费尔全杀

无尽藏海

F:\virus\winhex32.rar » RAR » Server.exe - a variant of Win32/Agent.ADW trojan

woai_jolin

Scan Log
Version of virus signature database: 2852 (20080206)
Date: 2008-2-6  Time: 21:36:11
Scanned disks, folders and files: G:\v\winhex32.rar
G:\v\winhex32.rar » RAR » Server.exe - a variant of Win32/Agent.ADW trojan - was a part of the deleted object
G:\v\winhex32.rar » RAR » WiNHeX32.dll - is OK
Number of scanned objects: 3
Number of threats found: 1
Time of completion: 21:36:11  Total scanning time: 0 sec (00:00:00)

冷冷

ClamAV

I:\virus\test/Server.exe: PUA.Packed.NPack-1 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 206736
Engine version: 0.92
Scanned directories: 1
Scanned files: 2
Infected files: 1
Data scanned: 0.24 MB
Time: 6.515 sec (0 m 6 s)

gho

2008-2-6        21:37:15        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\Server.exe        New Malware.eb (Trojan)

a750828

McAfee New Malware.eb

leonfg

ESET  1
C:\Documents and Settings\GUNDAM\桌面\winhex32.rar » RAR » Server.exe - a variant of Win32/Agent.ADW trojan